[CLSA-2026:1787137516] ImageMagick: Fix of 2 CVEs
Type:
security
Severity:
None
Release date:
2026-08-26 09:52:34 UTC
Description:
- CVE-2025-66628: add an overflow check before computing the TIM image size in ReadTIMImage (coders/tim.c) to prevent an out-of-bounds read on 32-bit systems - CVE-2026-25989: make the upper-boundary checks in CastDoubleToLong and CastDoubleToUnsigned (magick/image-private.h) inclusive so a value equal to the limit is clamped instead of reaching an undefined integer cast
Updated packages:
  • ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els2.i686.rpm
    sha:5272232c3ccdda3f9c10b6b755f0682db4dfd018df97e7d3a1e1d34bd2e54c74
  • ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm
    sha:c989bc7fd972f964e94cbbbf7725364bee9c149e66dd207c15200ee2d33e8b86
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els2.i686.rpm
    sha:0a503b5d7ee34b9628146a2fdb41868c0731176fe444896640a0f635dd81f921
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm
    sha:7a3590e7cdc12edf7a589c787cf0f81472c483ea74e9b345ca155f494c197218
  • ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm
    sha:d1fbe07830882e36983f9e6966575c12611cd79c076a1d0ec033063e6657ec7a
  • ImageMagick-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm
    sha:e0abfc22c13d25c43a19001b03510908e6874d2959a25f73ee43be69bce98287
  • ImageMagick-doc-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm
    sha:4bb68364d7963cef80e507f594fc09dcd166504d39930c106398ecb74f04ecc2
  • ImageMagick-perl-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm
    sha:79c8511264b0858814988700c010103622ec26748b3364f646269fd438e81664
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.