[CLSA-2026:1790181500] Fix CVE(s): CVE-2026-93586
Type:
security
Severity:
Moderate
Release date:
2026-09-23 16:38:32 UTC
Description:
* SECURITY UPDATE: use-after-free in ImagesToBlob() on multi-image writes - debian/patches/CVE-2026-93586.patch: add SyncBlobStream() to magick/blob.c and call it after each WriteImage() in magick/constitute.c and after the write in ImageToBlob() and ImagesToBlob(), so the image list and image_info stop referencing the buffer a previous frame's SetBlobExtent() reallocated - CVE-2026-93586
CVEs fixed:
Updated packages:
  • imagemagick_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:424cef6cb6f4a854368bf0e67bbc7751a97cf8d4
  • imagemagick-6.q16_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:90400d67b6d25e854c285b59df5ab87a2dd39ec6
  • imagemagick-common_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:271380e0a1690033338f47c762be55cb8b9988c4
  • imagemagick-doc_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:27f8574f1c583f6d4e3aafdc899821687444a00c
  • libimage-magick-perl_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:276a41e5a7163af67b8b55c461372543fbc80968
  • libimage-magick-q16-perl_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:e551d95243ef12cf9d86ab1bacfbf3fbf7cbbc89
  • libmagick++-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:e0ad5dd159dfd0ef6aaa4519864d0bae87ec3d77
  • libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:4709ee46d38e85db48e5bcdecea328807965d754
  • libmagick++-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:f3052ebc7170fe9eba799ca5a8c54f16dc3bbcf3
  • libmagick++-dev_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:22c1cc49d1a4094cc5fd76b707b6cbd108a97350
  • libmagickcore-6-arch-config_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:28221e31b0aa152a7311d83d0b4a4ad7e67f4fae
  • libmagickcore-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:20e82c7fd35456acb78513df03e4e7746d2103b3
  • libmagickcore-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:1d6f2b3978ca0ff433da98d2a3902eb6a099bfdc
  • libmagickcore-6.q16-2-extra_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:f297793bc636f3372deb27d78a9b7305c1f874c2
  • libmagickcore-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:31b48b597d20864bb4af9f5325934694fe33108e
  • libmagickcore-dev_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:c2c852b11b005b274d73293f30642786361af46e
  • libmagickwand-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:5bc294cadfcadb13cc7d2361a5dcc6f7f550bcfa
  • libmagickwand-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:d59b609375e0838ac4779d555b6f60677d969fd6
  • libmagickwand-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els61_amd64.deb
    sha:0ce043a8415a0b1c2ec40bdbf71d53930fb5c890
  • libmagickwand-dev_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:4f08edeb7e4586573e675ab1b79c41411060ca2f
  • perlmagick_6.8.9.9-7ubuntu5.17+tuxcare.els61_all.deb
    sha:b26e73b95afbb894f3f990dbed9cc32fd236ea29
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.