Release date:
2026-10-15 14:02:27 UTC
Description:
- CVE-2026-106571: check the pixel cache nexus size calculation for overflow
- CVE-2026-106573: limit macro expansion in the MVG renderer
- CVE-2026-106578: fix an invalid free in the MVG decoder by correcting the
CheckPrimitiveExtent() call
- CVE-2026-106579: check the coder name against the security policy so a crafted
image cannot bypass a coder-domain policy
- CVE-2026-106577: escape and trim labels written by the PS, PS2, PS3 and PDF
coders to prevent PostScript code injection
Updated packages:
-
ImageMagick-6.9.13.52-2.el8_5.tuxcare.els4.x86_64.rpm
sha:f202ec9420b59155aa968ecfbdc6e3eb42a8321fb1b12622736a4f21d4116cec
-
ImageMagick-c++-6.9.13.52-2.el8_5.tuxcare.els4.x86_64.rpm
sha:394366c09e51ad255f09ba2a33122952580a17d7cb789b101cc6b2d224b8064c
-
ImageMagick-c++-devel-6.9.13.52-2.el8_5.tuxcare.els4.x86_64.rpm
sha:20e14dae117d0919ac1d9c1932723656941c0e44874a7a7dd23c59c3a6517be8
-
ImageMagick-devel-6.9.13.52-2.el8_5.tuxcare.els4.x86_64.rpm
sha:68dd0a73322c8457a56edcc085d9318e8ddd1c66b7b0abe03df9d55755ac502f
-
ImageMagick-djvu-6.9.13.52-2.el8_5.tuxcare.els4.x86_64.rpm
sha:f703157a3b1af6ff0677c30c9f6df378e85ea0dab0f80697d7dbd0fb2cca825e
-
ImageMagick-doc-6.9.13.52-2.el8_5.tuxcare.els4.x86_64.rpm
sha:8aca727f927b96c01e02ebe78eb396e4e7d641df00eb94c4687d7cb46f4c78e8
-
ImageMagick-libs-6.9.13.52-2.el8_5.tuxcare.els4.x86_64.rpm
sha:edf702ebc51ba27e30a2d0684490daeff5456a54a5ab8053ce54586b13a7fb06
-
ImageMagick-perl-6.9.13.52-2.el8_5.tuxcare.els4.x86_64.rpm
sha:2e09297b0433485d29d4867d31d174553b9454af2a36111566694cd12dce0316
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
