[CLSA-2026:1784734011] ImageMagick: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-22 15:27:22 UTC
Description:
- CVE-2026-61857: check ResizeQuantumMemory() return value in ParseEntities() (magick/xml-tree.c) to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffman_image clone on temp-file open failure in WriteGROUP4Image() (coders/tiff.c) to fix a memory leak - CVE-2026-61870: relinquish pixel_info before throwing on colormap allocation failure in WriteVIFFImage() (coders/viff.c) to fix a memory leak
Updated packages:
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:c8b4f2cb0e1654c0762292e24fc4da781ecba4db5140707f581817dc8757eaf4
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:5b8bb973daa1f4d127f6ddb9da9039473c3490602ce3408317ca467bcfd742da
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:49215397255c7da2e49d1e18fb494c64c220a54a28cf9b90765d82971b29d574
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:06bdf8e9abd9170baf977cec95bc115f67c61980bf7234f98012b42b7310a561
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:10c26bf8b64cb6306dc0b575f019f19b7fb16ec7eeb6ae887dcf769c80dcac90
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:9ce3a0220304f9d0913a2da9b27b4be74ef52805855ac8fffd5af6136d59c248
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:e76a864dc1d7bb5bcefad390d322175eb27eef1b56e225f1126bc4d8e7788ec1
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:2aeb42ab4391042540d3a8151562737c970d890dcf52776daad9e62e24899b86
  • ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:01d8830ee0282a93047e1fb17263a034ac8a22661b9a9119b8ef4769bdc90f03
  • ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:8514c5c21e908ac21fcbb8b1f40c0fe51b657541d7ffaff5e046107c6d7bc802
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.