Release date:
2026-10-15 12:15:45 UTC
Description:
- CVE-2026-106571: check the pixel cache nexus size calculation for overflow
- CVE-2026-106573: limit macro expansion in the MVG renderer
- CVE-2026-106578: fix an invalid free in the MVG decoder by correcting the
CheckPrimitiveExtent() call
- CVE-2026-106579: check the coder name against the security policy so a crafted
image cannot bypass a coder-domain policy
- CVE-2026-106577: escape and trim labels written by the PS, PS2, PS3 and PDF
coders to prevent PostScript code injection
Updated packages:
-
ImageMagick-6.9.13.52-2.el8_4.tuxcare.els4.x86_64.rpm
sha:5f35e8cd44176389a13ac23e695427c68777ef03a388b1c7f7474cafebe08372
-
ImageMagick-c++-6.9.13.52-2.el8_4.tuxcare.els4.x86_64.rpm
sha:f05f0c1670d348388bc6f4a87df5e8a430dfc731e6a45b338ffe09c21dece422
-
ImageMagick-c++-devel-6.9.13.52-2.el8_4.tuxcare.els4.x86_64.rpm
sha:60a07c83d783e9c5ad12a9ecf2e9d462e2b533446bb32ee5ade7b3f861c2244a
-
ImageMagick-devel-6.9.13.52-2.el8_4.tuxcare.els4.x86_64.rpm
sha:4e6a24c8553534783b074b6043623a37aaca88c81f786a899a1c6bcd0f2012d5
-
ImageMagick-djvu-6.9.13.52-2.el8_4.tuxcare.els4.x86_64.rpm
sha:c687a82644e9a1815a7c2d329c6abbc08f94cef34b20e20380452e1a6672640e
-
ImageMagick-doc-6.9.13.52-2.el8_4.tuxcare.els4.x86_64.rpm
sha:06733721584336620c82f2d6371512612537400a446cab961e1ee0ee0923c94a
-
ImageMagick-libs-6.9.13.52-2.el8_4.tuxcare.els4.x86_64.rpm
sha:32d22eee6af697904c0fda8fc57ca62a1af34ab7474479c45411cf85c3d61d10
-
ImageMagick-perl-6.9.13.52-2.el8_4.tuxcare.els4.x86_64.rpm
sha:49c6f59a1c24766ea376dc67a45d72ebad03629083c5adfb441b00af81d149e1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
