[CLSA-2026:1791459583] Fix CVE(s): CVE-2026-56367
Type:
security
Severity:
Critical
Release date:
2026-10-08 11:39:56 UTC
Description:
* SECURITY UPDATE: heap out-of-bounds read in the PSD/PSB decoder - debian/patches/CVE-2026-56367.patch: check image->rows * psd_info->channels for integer overflow with HeapOverflowSanityCheckGetSize() before ReadPSDRLEOffsets() allocates the RLE offsets array in ReadPSDMergedImage() in coders/psd.c, and raise MemoryAllocationFailed when that product wraps - CVE-2026-56367
CVEs fixed:
Updated packages:
  • imagemagick_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:cda27612ce3f8dbe0b0bc2ce7bd559dc24d2bb3e
  • imagemagick-6.q16_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:b2adb353985f4de705bc0520c52b732b8994fbd2
  • imagemagick-common_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:0dba6ddd919fbe3ab393e50b79d4e5a5495e92e0
  • imagemagick-doc_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:95f83983b52770733610ee7de0c0a8f65f5386f5
  • libimage-magick-perl_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:3bf10af5a18df502d5d335ab88ae585e06e6043b
  • libimage-magick-q16-perl_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:d81cb93e15966a45a384366ceb8314e89133eda7
  • libmagick++-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:082d9a1016ff34612bea9daa362fdf5ce9642b19
  • libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:d508b0dfab0351692fc79c47acb576671d310060
  • libmagick++-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:18ccb4abe7fece9eb9b72850539c83dc5f2f4141
  • libmagick++-dev_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:f45a3ddaaf985afd900ebbb1aee53c8bd897d4b4
  • libmagickcore-6-arch-config_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:b7d1212907fce07a3ce04d8e9147d36027df4c14
  • libmagickcore-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:c019eff6f7adb505ffc93c9a031f58668d996b63
  • libmagickcore-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:355fc07c0669725f39af70aaba6d94d9de5979e5
  • libmagickcore-6.q16-2-extra_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:f83323ef5c3fe1e298af00ee8b3c7b105c602e69
  • libmagickcore-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:1f535f1d5dd226ac4038aae0a738e17b26e74cb5
  • libmagickcore-dev_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:b2079747e5a44cf964b55e31c051a4143d6168d9
  • libmagickwand-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:2168bc768d89841cbd0e61576039f5a8ae2dea61
  • libmagickwand-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:29bc21d953e9fc63de6afc5a049436259cc31d52
  • libmagickwand-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els62_amd64.deb
    sha:f3055e48827bfdadf5aa08864affdcbc199b7872
  • libmagickwand-dev_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:d1479643adae99dfd010404f15c64c6a4e570fda
  • perlmagick_6.8.9.9-7ubuntu5.17+tuxcare.els62_all.deb
    sha:3135c5d019b18d6471c66db76e40087f839cf337
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.