[CLSA-2026:1783630877] ImageMagick: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-11 17:11:23 UTC
Description:
- CVE-2026-33901: add MVG push clip-path/gradient/pattern bounds check in DrawImage() to prevent out-of-bounds read - CVE-2026-33908: bound DestroyXMLTree() recursion depth to prevent stack exhaustion on deeply nested XML
Updated packages:
  • ImageMagick-6.7.2.7-7.el6.tuxcare.els4.i686.rpm
    sha:6012d3f872b5b5a3d8cfd995bc6f38994a5f4f4bebd53cd98cd087f4a2314cb8
  • ImageMagick-6.7.2.7-7.el6.tuxcare.els4.x86_64.rpm
    sha:4981fc43fccc684c2031fdfbd34b118d1998db94617ec58c5e144ad20392bbd6
  • ImageMagick-c++-6.7.2.7-7.el6.tuxcare.els4.i686.rpm
    sha:c43d067280df7fda01f48f743e52051f2b8aec0aee1b781dc8bc4250dcb4ae21
  • ImageMagick-c++-6.7.2.7-7.el6.tuxcare.els4.x86_64.rpm
    sha:ee38005ebcd051a617439c59ab6cb6647f41880d4a37af1c4cd71a77b2ef03bc
  • ImageMagick-c++-devel-6.7.2.7-7.el6.tuxcare.els4.i686.rpm
    sha:bd9d095bfddcc86496ed7875193ed05a5f46a345df06b9588040a4743c40d655
  • ImageMagick-c++-devel-6.7.2.7-7.el6.tuxcare.els4.x86_64.rpm
    sha:6cc0dce4a9267ad0dc6eaca0ed7df9ca80a7cd275290d0cf2c4cfa24a744df92
  • ImageMagick-devel-6.7.2.7-7.el6.tuxcare.els4.i686.rpm
    sha:b98fe2f46382d83e4acf7497239831f06670cc1e54972075e81a71b39f719a62
  • ImageMagick-devel-6.7.2.7-7.el6.tuxcare.els4.x86_64.rpm
    sha:a574d366cd926a93ebfc7d2d986839ce103560a9c43407064a91e1574975dc1b
  • ImageMagick-doc-6.7.2.7-7.el6.tuxcare.els4.x86_64.rpm
    sha:0cc10260fd67f8caab0d67ef283deb3f88a196e3aa9b63924129ad440d3f4969
  • ImageMagick-perl-6.7.2.7-7.el6.tuxcare.els4.x86_64.rpm
    sha:25a20c801eb8ec8e56e27321e6a8a56a4d8a6b3fd0de38b7bc6c9e47f6bc44c1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.