CLSA-2026:1773334093 TuxCare License Agreement 0 - Initial package None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Initial package

0 tuxcare-rhel8-els els-os-release-1.0.0-0.el8.x86_64.rpm 2e4712770d5ff8f0cd99fa558bddd6a41a0b87dfb9757e49d0402dd09e4a4844 CLSA-2026:1774355598 TuxCare License Agreement 0 - CVE-2026-2003: fix memory disclosure via oidvector type Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2003: fix memory disclosure via oidvector type

0 tuxcare-rhel8-els postgresql-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm 095533201e404c803d0b70e47fe4becf4afadadff7f9dc84d026cca31ae1e0a2 postgresql-contrib-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm 5681bd9a88e3e2046a0b80e7bea43c3e9abc14eaf218352ffab6ab8a4b7fb770 postgresql-docs-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm 3e8923bfdb4ed306a1b9d08d15a0346bded1ad9b730b38fcbf6b3be8298c776b postgresql-plperl-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm 3332875cfad6c5bfcbd11df8828dc6bc43c02fb484f36c5bab52b098d8f1f033 postgresql-plpython3-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm b289e0236351fa8a54dcc3953e56b68019465905bcb87268f7cbe5d3d1b4c740 postgresql-pltcl-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm c035dc34bc8d45a1932834783ec241aa79e23f7e7eb5ec765fae4a9239829e37 postgresql-server-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm 5c4dce086abca7522706a6d9367fe4ae394e8d743e4068447fd54cbc69440a7d postgresql-server-devel-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm b95339f67566ad9640e7a13a09b662ba6e4220506ff0126a37d937b9d405cc9b postgresql-static-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm fab9241d51696d88929bf2c535352b96cd6a6f5e9e8123451750d6bdabc4cd48 postgresql-test-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm bb3162a25ac6290f8bc8312ac6ff74a7b080a67bda5be35db6ba2e530f0da244 postgresql-test-rpm-macros-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.noarch.rpm e8ea405f66e49cebbd4e51bc4abfda0569233b1e25e563c3197969b59708863b postgresql-upgrade-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm 2a91218c48c1c52e0018b0a65ec57dc8253771be8a5854f92505e934ce00aed6 postgresql-upgrade-devel-13.23-2.module_el8+2364+b49622e4.tuxcare.els1.x86_64.rpm 8b03e73506a0d501028fcc2a1be5d9fefb77e8107a2fc0f79c6a317390dd00c1 CLSA-2026:1775033648 TuxCare License Agreement 0 - CVE-2022-21724: ensure arbitrary classes can't be passed instead of SocketFactory, SSLSocketFactory, CallbackHandler, HostnameVerifier - Restore testing from previous spec versions, exclude broken tests Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-21724: ensure arbitrary classes can't be passed instead of SocketFactory, SSLSocketFactory, CallbackHandler, HostnameVerifier - Restore testing from previous spec versions, exclude broken tests

0 tuxcare-rhel8-els postgresql-jdbc-42.2.14-3.el8_9.tuxcare.els1.noarch.rpm f994d76a4728c6fbfceb4d5b7f80f424cf1ed0aff7c79bd38e0ecc96d378c849 postgresql-jdbc-javadoc-42.2.14-3.el8_9.tuxcare.els1.noarch.rpm 6388f1345bd18314b480e7c59bc47b5994c321f7e942504f5f673e845b44bdd9 CLSA-2026:1776960263 TuxCare License Agreement 0 - CVE-2026-32636: out-of-bounds write of a single zero byte in ConvertUTF16ToUTF8 via NewXMLTree when resizing UTF-8 buffer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32636: out-of-bounds write of a single zero byte in ConvertUTF16ToUTF8 via NewXMLTree when resizing UTF-8 buffer

0 tuxcare-rhel8-els ImageMagick-6.9.13.25-1.el8.tuxcare.els27.x86_64.rpm a0ea0d38e5eb3580d0276fb4bb6d089664b63a176a672ece6be288d6e5bddb25 ImageMagick-c++-6.9.13.25-1.el8.tuxcare.els27.x86_64.rpm a3d85d9145e7ccd9208abd527e7c7f41c8315a85c36b0d93f51ea035f6ef4ad9 ImageMagick-c++-devel-6.9.13.25-1.el8.tuxcare.els27.x86_64.rpm 5f21517c328a466a8fa699370660a68e9bafa3580a26c61313cf23864a0da650 ImageMagick-devel-6.9.13.25-1.el8.tuxcare.els27.x86_64.rpm af2669c4eb413227fd1768e18fe779494e0937115e7d965b3d8c488d93292312 ImageMagick-djvu-6.9.13.25-1.el8.tuxcare.els27.x86_64.rpm 09fa9d081a5e785a9bcaf59b5f2d8339e071688af017d1d8949936f4a6a716e5 ImageMagick-doc-6.9.13.25-1.el8.tuxcare.els27.x86_64.rpm 26d6d0cee48ffd3ad769a74d1ad3f8b91f4dd75cb7ac1c094bd59452552164b8 ImageMagick-libs-6.9.13.25-1.el8.tuxcare.els27.x86_64.rpm 26b4c8339d205d7d2ac14135893d018bc2323b0481abb06d495ff6555bf6646d ImageMagick-perl-6.9.13.25-1.el8.tuxcare.els27.x86_64.rpm 56b8131f5d306927db5c54756d30c55a281107b19a6c06bc6e77fa3d45692fd6 CLSA-2026:1777395036 TuxCare License Agreement 0 - CVE-2026-33900: integer truncation/wraparound in the viff encoder that could trigger an out-of-bounds heap write on 32-bit builds (GHSA-v67w-737x-v2c9; upstream b6c01a5a23f1e350ebe2db78c7cc326db2e320c9) - CVE-2026-33905: out-of-bounds read in SampleImage when sample:offset is set via -sample define (GHSA-pcvx-ph33-r5vv; upstream 140fc7b01fa7d870b3bc8453fb7adccfb7c1e202 with follow-up 8d73954bf7e13a352e71a32cf7d18905577f17e8) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33900: integer truncation/wraparound in the viff encoder that could trigger an out-of-bounds heap write on 32-bit builds (GHSA-v67w-737x-v2c9; upstream b6c01a5a23f1e350ebe2db78c7cc326db2e320c9) - CVE-2026-33905: out-of-bounds read in SampleImage when sample:offset is set via -sample define (GHSA-pcvx-ph33-r5vv; upstream 140fc7b01fa7d870b3bc8453fb7adccfb7c1e202 with follow-up 8d73954bf7e13a352e71a32cf7d18905577f17e8)

0 tuxcare-rhel8-els ImageMagick-6.9.13.25-1.el8.tuxcare.els28.x86_64.rpm 15e54c4b4515efce65fca064ae7d3fd6becc8ad2e88f96ff0e9493f39c976861 ImageMagick-c++-6.9.13.25-1.el8.tuxcare.els28.x86_64.rpm d6a3762cd89abc37c2d4388f9004959935027ec77540c78eb366784399583856 ImageMagick-c++-devel-6.9.13.25-1.el8.tuxcare.els28.x86_64.rpm a87e616319a917902cee9897fa6cafbeefefcf6369effc8b08e3024f580f48c6 ImageMagick-devel-6.9.13.25-1.el8.tuxcare.els28.x86_64.rpm 394ff3bd0734a25616446928cb48f6625afecb684a2f1e31f13a16d3ccfae892 ImageMagick-djvu-6.9.13.25-1.el8.tuxcare.els28.x86_64.rpm f8fee769c50333c6bc76fb2be420a788cbd94685bbe488ab065468c0627b728e ImageMagick-doc-6.9.13.25-1.el8.tuxcare.els28.x86_64.rpm 33555353d798aad4b08a73cde1d224a757570dded6dff7cc32a46b6ef49507ef ImageMagick-libs-6.9.13.25-1.el8.tuxcare.els28.x86_64.rpm c9a2d11974a290d057d10e90d2deb27c019f793478cafe2d3ba7de8ef78cd25d ImageMagick-perl-6.9.13.25-1.el8.tuxcare.els28.x86_64.rpm f1d5094c6833d0fefb4b6a9d8d952a40d62706ff480bfc382c7aecd77c1bb070 CLSA-2026:1779128854 TuxCare License Agreement 0 - CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool

0 tuxcare-rhel8-els ImageMagick-6.9.13.25-1.el8.tuxcare.els30.x86_64.rpm 622f42c3ed8045ee213a4172b44c5d6a55a8b6fec54324f39d77f0b40ccd7e0e ImageMagick-c++-6.9.13.25-1.el8.tuxcare.els30.x86_64.rpm d17320dffd0c5735f48f388b6fed2671590f9f73462dfeff625970c6d352b758 ImageMagick-c++-devel-6.9.13.25-1.el8.tuxcare.els30.x86_64.rpm fb80885c08a453d0d65ab8ad92459e0773a6272c218195af8b252fe7f95b3e3f ImageMagick-devel-6.9.13.25-1.el8.tuxcare.els30.x86_64.rpm 72a18189a860c63c1a6c565fec0b301a6251fdd98ca3d90231aeec58aa395e1c ImageMagick-djvu-6.9.13.25-1.el8.tuxcare.els30.x86_64.rpm f00acee0a28f38198588665a2f8e925dd560d1586efed8011e50dac47dcb86b7 ImageMagick-doc-6.9.13.25-1.el8.tuxcare.els30.x86_64.rpm 02126782eddf86b4cb2e1ff14bad3c16c9a244adf27424b45cb71a71d7e9e6f4 ImageMagick-libs-6.9.13.25-1.el8.tuxcare.els30.x86_64.rpm a3d8d607f7fef3b410d8b66caabb84208ddad026ba2cbed5b8f1659f0972aca6 ImageMagick-perl-6.9.13.25-1.el8.tuxcare.els30.x86_64.rpm 647ea4f316cfea63ff313026d2314ec0a4f35003801e592afcfda938b4543f36 CLSA-2026:1780661920 TuxCare License Agreement 0 - CVE-2026-28689: fix path policy TOCTOU symlink race allowing read/write of policy-denied files - CVE-2026-28692: fix heap buffer over-read in MAT decoder caused by 32-bit integer overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28689: fix path policy TOCTOU symlink race allowing read/write of policy-denied files - CVE-2026-28692: fix heap buffer over-read in MAT decoder caused by 32-bit integer overflow

0 tuxcare-rhel8-els ImageMagick-6.9.13.25-1.el8.tuxcare.els31.x86_64.rpm 3fa04f2d1f2475cc6a23974f0accb7345e6edd706f076f3473f3445eb3b5caee ImageMagick-c++-6.9.13.25-1.el8.tuxcare.els31.x86_64.rpm e3004ca16e4e74bb57c5e5859045825b58642e6399957df811a09265dea42474 ImageMagick-c++-devel-6.9.13.25-1.el8.tuxcare.els31.x86_64.rpm b71f9092d496ebfb4a5bd657d6919eb9134e24c441c470a584503ccc78014847 ImageMagick-devel-6.9.13.25-1.el8.tuxcare.els31.x86_64.rpm deed9fa38d05023da0b48e59df93d5368f71566d41fbdae3a40f83e398ea6c07 ImageMagick-djvu-6.9.13.25-1.el8.tuxcare.els31.x86_64.rpm 0fd0966ad7b6a9964377c499c4aea4be9ce8a2d7c25ee76f4d228a645e4c51f5 ImageMagick-doc-6.9.13.25-1.el8.tuxcare.els31.x86_64.rpm 78de77e944d0b03031c767ba09f0ded8fdb68d53624139f79638f20f6e4795ee ImageMagick-libs-6.9.13.25-1.el8.tuxcare.els31.x86_64.rpm e17e12df78fc8c0f434e3f33bc43f2345e7577aac29e5aed9286dbd9fe986352 ImageMagick-perl-6.9.13.25-1.el8.tuxcare.els31.x86_64.rpm 7c3d9aadd04bb7fc3209f488b7e70357338d50444f9bed3fff5e804abc30c42f CLSA-2026:1780965584 TuxCare License Agreement 0 - CVE-2026-6473: formatting.c / contrib intarray / ltree: avoid integer overflow in size calculations - CVE-2026-6474: timeofday / pg_strftime: guard against unsafe format codes and ensure null-termination on overflow - CVE-2026-6475: prevent path traversal in pg_basebackup and pg_rewind via path_is_safe_for_extraction() - CVE-2026-6477: libpq: harden PQfn() / pqFunctionCall3 against server-controlled buffer overruns in lo_read() - CVE-2026-6478: authentication: add timingsafe_bcmp() helper and apply it in MD5 / SCRAM / RADIUS / plain auth paths - CVE-2026-6479: postmaster: bound SSL/GSS negotiation recursion in ProcessStartupPacket() - CVE-2026-6637: refint contrib: prevent SQL injection and buffer overruns in check_primary_key / check_foreign_key Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6473: formatting.c / contrib intarray / ltree: avoid integer overflow in size calculations - CVE-2026-6474: timeofday / pg_strftime: guard against unsafe format codes and ensure null-termination on overflow - CVE-2026-6475: prevent path traversal in pg_basebackup and pg_rewind via path_is_safe_for_extraction() - CVE-2026-6477: libpq: harden PQfn() / pqFunctionCall3 against server-controlled buffer overruns in lo_read() - CVE-2026-6478: authentication: add timingsafe_bcmp() helper and apply it in MD5 / SCRAM / RADIUS / plain auth paths - CVE-2026-6479: postmaster: bound SSL/GSS negotiation recursion in ProcessStartupPacket() - CVE-2026-6637: refint contrib: prevent SQL injection and buffer overruns in check_primary_key / check_foreign_key

0 tuxcare-rhel8-els postgresql-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm 3949444c2464d928459beaaea396f4685327178aa3e1dac320428460703dc983 postgresql-contrib-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm 546fc0fa92b5f20a00797c83c6b1974b4e2c126265429be321e90d8686f3f1a8 postgresql-docs-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm 24d64deda7b5861492a01165087a807119363e75243737a4e76d2ec8214b5304 postgresql-plperl-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm d5b5d73f3163dfdf02038f94486d3057f23e7951168d1912403403761cc82d18 postgresql-plpython3-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm 62d09de6d7d3819adb15d536d893de159f08b48dc260698e2f318880d1b81413 postgresql-pltcl-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm ab943b3c1933312e2dccad3c73bf319cfcbf243bb962399e9bb70483eee38b0f postgresql-server-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm 3e4dc14be0f15cd7d028000a812a92f150f258dea54fdd81328521c4f1fe44e3 postgresql-server-devel-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm fa0a26beb3eb9e8dfa41665265d181eaa8adcd44d9dd68f1c191b856f7a75100 postgresql-static-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm e6e171c82feb654fc55bebf9775fec4d1af2dd1152c46184742f804c04197b0d postgresql-test-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm 94d4ca38254e29cc9d32d9804a055ad3d8e31332be6048025ed5e7e300893cf7 postgresql-test-rpm-macros-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.noarch.rpm 767d14c9446d53f9a3de2065811a44844ab4e008f6d58ed12bc8d67755ddf3df postgresql-upgrade-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm 21017c8be01a298cd132e2b73764a42037b1fec51dcb84884e71f02a2be59f8d postgresql-upgrade-devel-13.23-2.module_el8+2415+b49622e4.tuxcare.els2.x86_64.rpm cdeedee9f933da16878e8db93603c3dd8bdc488edd8b601be55c3b4bf6364dfb CLSA-2026:1781606022 TuxCare License Agreement 0 - CVE-2026-45358: off-by-one out-of-bounds read in the meta (8BIM/IPTC) encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder (zero rows/columns) - CVE-2026-53461: heap buffer over-write in the ICON decoder due to an incorrect loop bound - CVE-2026-53463: NULL pointer dereference in the distort operation on missing arguments - CVE-2026-53460: missing maximum-memory-request check in AcquireAlignedMemory - CVE-2026-46692: heap buffer over-write in the distributed pixel cache server - CVE-2026-46693: file-descriptor hijacking race in the distributed pixel cache server - CVE-2026-47166: heap buffer over-read in the distributed pixel cache server Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45358: off-by-one out-of-bounds read in the meta (8BIM/IPTC) encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder (zero rows/columns) - CVE-2026-53461: heap buffer over-write in the ICON decoder due to an incorrect loop bound - CVE-2026-53463: NULL pointer dereference in the distort operation on missing arguments - CVE-2026-53460: missing maximum-memory-request check in AcquireAlignedMemory - CVE-2026-46692: heap buffer over-write in the distributed pixel cache server - CVE-2026-46693: file-descriptor hijacking race in the distributed pixel cache server - CVE-2026-47166: heap buffer over-read in the distributed pixel cache server

0 tuxcare-rhel8-els ImageMagick-6.9.13.25-1.el8.tuxcare.els32.x86_64.rpm ac517abce1d0634ba4f9dbe339d7c88dc0865677e3e6e3b0f3519a018c59f623 ImageMagick-c++-6.9.13.25-1.el8.tuxcare.els32.x86_64.rpm 4045ed53922c8b73b77446864d0dc47605cfc7514b0422d5c535ed641187c97c ImageMagick-c++-devel-6.9.13.25-1.el8.tuxcare.els32.x86_64.rpm 4f47353ef5c497efcf34e5847fdaf2216d742b6780f6a381924a6bb5f5cbe52a ImageMagick-devel-6.9.13.25-1.el8.tuxcare.els32.x86_64.rpm 7a789b78b3b7b8153f993795039b5d0319c9883ddb5871c5fbafafaeddcac19c ImageMagick-djvu-6.9.13.25-1.el8.tuxcare.els32.x86_64.rpm 94cb61e8e793369747148ddf12074416fe2b3f10f48df5c45f899a5bb6a872e1 ImageMagick-doc-6.9.13.25-1.el8.tuxcare.els32.x86_64.rpm 5c15ca877af9f478b4d8d8251235891e5879ef7c220230eb009978b9e583ab8f ImageMagick-libs-6.9.13.25-1.el8.tuxcare.els32.x86_64.rpm a2ce38a616598eaa1d99e2be016d0beafdfdb981f950c863722e728e5d671ab0 ImageMagick-perl-6.9.13.25-1.el8.tuxcare.els32.x86_64.rpm 11126081133f2aa687c11e2f40b7880f558aca0f7df4bf735c4b40ce9dfc7d70 CLSA-2026:1782138366 TuxCare License Agreement 0 - CVE-2026-49219: enforce the path security policy across followed symlinks in magick/blob.c so a symlink can no longer bypass a path-domain deny rule and disclose a restricted file None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-49219: enforce the path security policy across followed symlinks in magick/blob.c so a symlink can no longer bypass a path-domain deny rule and disclose a restricted file

0 tuxcare-rhel8-els ImageMagick-6.9.13.25-1.el8.tuxcare.els33.x86_64.rpm a279ab9b31945889b559587dfa7bb4eeac48e74d0635aa77a7e16df434b296c7 ImageMagick-c++-6.9.13.25-1.el8.tuxcare.els33.x86_64.rpm 3fbc107fa3fd7dcbf69e08220e1bbc271955ad456a289bcdd649a22d75cd3d8e ImageMagick-c++-devel-6.9.13.25-1.el8.tuxcare.els33.x86_64.rpm 7acad3d4fd6c1599c33b6ee35ce6904c8fdce5c0fce67ccd9e880911fbc2f688 ImageMagick-devel-6.9.13.25-1.el8.tuxcare.els33.x86_64.rpm 196714cbc6dd20095b4a426a36463a729b445ef4fe66c431ef95b8503ddc68c0 ImageMagick-djvu-6.9.13.25-1.el8.tuxcare.els33.x86_64.rpm 8314a439c2693cc141fe404049422e6ba56e9753a89d72ec40f544c8ff6f0910 ImageMagick-doc-6.9.13.25-1.el8.tuxcare.els33.x86_64.rpm dbca072de11003436033aa10966f098ab2776c5ef6d9ebb520385a2297235de7 ImageMagick-libs-6.9.13.25-1.el8.tuxcare.els33.x86_64.rpm cf1ead72f20d38bc32a05883a10bef36c5f1bff3f2262380a8de17c2a266b974 ImageMagick-perl-6.9.13.25-1.el8.tuxcare.els33.x86_64.rpm db43da02348630326d52954daa5182b2c9259154f8c51fe6fbef25879545fc23 CLSA-2026:1782909743 TuxCare License Agreement 0 - CVE-2026-33901: out-of-bounds heap write in the MVG decoder (RenderMVGContent) when copying oversized gradient/pattern bodies into the token buffer - CVE-2026-33908: stack exhaustion via uncontrolled recursion in DestroyXMLTree when freeing a deeply nested XML document Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33901: out-of-bounds heap write in the MVG decoder (RenderMVGContent) when copying oversized gradient/pattern bodies into the token buffer - CVE-2026-33908: stack exhaustion via uncontrolled recursion in DestroyXMLTree when freeing a deeply nested XML document

0 tuxcare-rhel8-els ImageMagick-6.9.13.25-1.el8.tuxcare.els34.x86_64.rpm 41f1423ffa3b78d277aa74dc7e202fbbcb77bf67d12c2af1c65600ecb3f6175c ImageMagick-c++-6.9.13.25-1.el8.tuxcare.els34.x86_64.rpm b31f140780092b8e4971cfca8cba484992340ddd7ec6b0aa518b7fa8504d2e5e ImageMagick-c++-devel-6.9.13.25-1.el8.tuxcare.els34.x86_64.rpm e5f54e9789fe6871cdf9ccfcf9012eef34c739cddd6bb314b554a136facf4462 ImageMagick-devel-6.9.13.25-1.el8.tuxcare.els34.x86_64.rpm 792521f5764d93aff90afaeeb284b052bcc68a74eafc58768d00adb9da418703 ImageMagick-djvu-6.9.13.25-1.el8.tuxcare.els34.x86_64.rpm 215bc82eb644c28a8c846652e16f21bb39246d26e8fea18e6d1e8a5a861dbf72 ImageMagick-doc-6.9.13.25-1.el8.tuxcare.els34.x86_64.rpm c608f3296bec77463b69eb18bac257d1ef9c1996865dd6b7ecb270bfd054170d ImageMagick-libs-6.9.13.25-1.el8.tuxcare.els34.x86_64.rpm 5241d8a486e5fe994be5bcc43e5340fe6c9a6fa60d6058220b9a33a081b534bc ImageMagick-perl-6.9.13.25-1.el8.tuxcare.els34.x86_64.rpm 6551f21bb0ed428faaffafdc3c31a51771adbc6ee204b22c77bfc947abddfb04 CLSA-2026:1784537224 TuxCare License Agreement 0 - Rebase to upstream 6.9.13.50, matching EPEL 8 ImageMagick-6.9.13.50-1.el8 - Drop the TuxCare CVE patches whose fixes are included in the upstream 6.9.13.50 release - Keep the MSL empty-image crash fix (partial backport of upstream fde1f305, not present in the legacy 6.x line) - CVE-2026-45664: free the chunk buffer on the MNG LOOP/ENDL op-cap abort path (upstream dd198f960, not yet included in 6.9.13.50) to prevent a heap memory leak when the loop-operation limit is hit Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to upstream 6.9.13.50, matching EPEL 8 ImageMagick-6.9.13.50-1.el8 - Drop the TuxCare CVE patches whose fixes are included in the upstream 6.9.13.50 release - Keep the MSL empty-image crash fix (partial backport of upstream fde1f305, not present in the legacy 6.x line) - CVE-2026-45664: free the chunk buffer on the MNG LOOP/ENDL op-cap abort path (upstream dd198f960, not yet included in 6.9.13.50) to prevent a heap memory leak when the loop-operation limit is hit

0 tuxcare-rhel8-els ImageMagick-6.9.13.50-1.el8.tuxcare.els1.x86_64.rpm 3d3c4ecb1e281736269c1615dcb7b97984180e5585127f1c5311980bcee8f2db ImageMagick-c++-6.9.13.50-1.el8.tuxcare.els1.x86_64.rpm c589d29bd2f4db2e80e9f94b4ad0932dcb2b7eead9b57495013782452ccfba73 ImageMagick-c++-devel-6.9.13.50-1.el8.tuxcare.els1.x86_64.rpm 76f8d92e84a3b1c7bc142be9aed5f2d9d51a7c77714143c00819b3d7ee39c5c8 ImageMagick-devel-6.9.13.50-1.el8.tuxcare.els1.x86_64.rpm 0cd0f603aa463b3ebe06d21bd635d5b7985fcdf7103261580ed73a2be95b1120 ImageMagick-djvu-6.9.13.50-1.el8.tuxcare.els1.x86_64.rpm 9167670901b84d3b2419726cc33abc1aeea636cd57554e3dce9b47598e50063b ImageMagick-doc-6.9.13.50-1.el8.tuxcare.els1.x86_64.rpm 82f585b734d167f60570529982ea2126672a1234bbfaff2ec31bf4c835fe19f1 ImageMagick-libs-6.9.13.50-1.el8.tuxcare.els1.x86_64.rpm 2fed888907fb553d6362a1e17705b6dcf8246dc5df6a0c50f4fbc603ff106dbe ImageMagick-perl-6.9.13.50-1.el8.tuxcare.els1.x86_64.rpm 5541b75df7b0e81a9e6968102fdfe8beb59ef80cdc6276d5dd0b08bb0b11f761 CLSA-2026:1784898606 TuxCare License Agreement 0 - CVE-2026-61863: fix a memory leak in WriteGROUP4Image when a temporary file can not be created or opened Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-61863: fix a memory leak in WriteGROUP4Image when a temporary file can not be created or opened

0 tuxcare-rhel8-els ImageMagick-6.9.13.50-1.el8.tuxcare.els4.x86_64.rpm 6607b8be9e3116e20fa254ea866528e1737123e7e711b71a11d38aaa19309094 ImageMagick-c++-6.9.13.50-1.el8.tuxcare.els4.x86_64.rpm ccf384f136744734d2ef65607792728003edace026fc98a50a0a4088760c44b0 ImageMagick-c++-devel-6.9.13.50-1.el8.tuxcare.els4.x86_64.rpm 382820374375e0519aff07fe7ce79c00e7116115d3356265cde039eeb8632a10 ImageMagick-devel-6.9.13.50-1.el8.tuxcare.els4.x86_64.rpm 9f5509757fec7d2a1b8fe621ad45e97f533dcd7dc8f3ec03e7876208207e7901 ImageMagick-djvu-6.9.13.50-1.el8.tuxcare.els4.x86_64.rpm d8df762901f9cb102b555586db09b4ab688940559087b17d477c23472d430f9b ImageMagick-doc-6.9.13.50-1.el8.tuxcare.els4.x86_64.rpm 9d1aad88cd317fa94877b466aeb16140671307d079d6f89960d386a9974f132f ImageMagick-libs-6.9.13.50-1.el8.tuxcare.els4.x86_64.rpm 8b5130cc56c8d8cf7ca3a9dcb4d80a02793d3bdffe1e59e10e9819d23edbe17b ImageMagick-perl-6.9.13.50-1.el8.tuxcare.els4.x86_64.rpm 439682b08dab4d54a5b5005823f7cc42b4f1478635a01bf2e3f9e0d17f60393f