Release date:
2026-09-16 13:32:59 UTC
Description:
* SECURITY UPDATE: memory leak in the MSL group handler
- debian/patches/CVE-2026-86421.patch: destroy the per-level DrawInfo in
the unwind of MSLEndElement. The unwind released the image,
the attributes and the image_info of every level it popped, but never
the DrawInfo that MSLPushImage clones for that level, so each nested
element leaked one DrawInfo (coders/msl.c)
- debian/patches/CVE-2026-86421-1.patch: bound that unwind loop so a
stale group_info numImages count cannot drive msl_info->n below zero.
This version predates upstream 8867bada, so the loop had no bound and
the DrawInfo destroy added above would otherwise widen the existing
out-of-bounds free by one pointer (coders/msl.c)
- debian/patches/CVE-2026-86421-2.patch: destroy the per-level DrawInfo
in MSLPopImage() too. MSLPopImage handles the pop outside a
group and is disjoint from the unwind patched above; this
version predates upstream 08278c7c (first released in 6.9.10-0), so
without it a crafted MSL document repeating ... still
leaks one DrawInfo per pop (coders/msl.c)
- CVE-2026-86421
Updated packages:
-
imagemagick_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:9953f641f689b349429593bf140c98e9fd665f98
-
imagemagick-6.q16_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:26bad37db1bf66bc235dd2d324234df7437ddda7
-
imagemagick-common_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:16924296b9a8e8e042cd6081a5ba39c97185ff20
-
imagemagick-doc_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:807ca563805000609cc255e74f3575b6ccfc4132
-
libimage-magick-perl_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:22a10c11f79565bfe389f59618e498a05f1eb4a2
-
libimage-magick-q16-perl_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:392d61e6afffdc13607d2707d9e9b3796f2f22bb
-
libmagick++-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:8db728f5c2fd9f6f59540ee4ac32a2851f725ef6
-
libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:ca4d83e057430bf85bfbe95f057c9b31d04aebc2
-
libmagick++-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:7c18cdae5e9c85d4bf081a723af008e565b4dd8b
-
libmagick++-dev_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:d387663f6db05f1393e7cd2f09af591cc5d43358
-
libmagickcore-6-arch-config_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:c6bdbbb62e333cd9c64d572cd574f479fbacf970
-
libmagickcore-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:56bfdd33e3e332a267f616bfc77a76d3966eba6d
-
libmagickcore-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:0075a4cb5906e440d2df20d474589708b9ee5eaa
-
libmagickcore-6.q16-2-extra_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:667f3dc88dc4b6b48d2771b5e279dbcac4485a96
-
libmagickcore-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:2982abf6569f80b1db6ec212a94fd6015c704913
-
libmagickcore-dev_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:2c1ccc778f395763c56eee0b007b931c486bac7b
-
libmagickwand-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:f70d14bef0a1102cd36eeb21b3ca32069758e28c
-
libmagickwand-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:28bafd00b2440c7c73ac837de0e9c3412332ff27
-
libmagickwand-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els59_amd64.deb
sha:32810f18585b8ab328dbc98d1b148eab7c8fa304
-
libmagickwand-dev_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:91911bf605fa6faddaafab2bf4e19066c189a7b0
-
perlmagick_6.8.9.9-7ubuntu5.17+tuxcare.els59_all.deb
sha:c2c35222d647ca31a10fc2aa0338f935cbd865b6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
