[CLSA-2026:1792072825] Fix CVE(s): CVE-2026-106568, CVE-2026-109263, CVE-2026-109275
Type:
security
Severity:
Important
Release date:
2026-10-15 14:00:37 UTC
Description:
* SECURITY UPDATE: infinite loop on circular parameter entities - debian/patches/CVE-2026-106568.patch: check entity values for both '%' and '&' references in ValidateEntities() so circular parameter entity declarations are rejected in ParseInternalDoctype() in magick/xml-tree.c - CVE-2026-106568 * SECURITY UPDATE: memory leak in the YUV encoder - debian/patches/CVE-2026-109263.patch: destroy the luma image when the chroma ResizeImage() fails and destroy the chroma image after the encoding loop in WriteYUVImage() in coders/yuv.c - CVE-2026-109263 * SECURITY UPDATE: PostScript code injection through the font name - debian/patches/CVE-2026-109275.patch: only pass font names made of alphanumerics, '-', '_' and '.' to the PostScript renderer in RenderPostscript() in magick/annotate.c - CVE-2026-109275
CVEs fixed:
Updated packages:
  • imagemagick_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:58e7a25d8dce8d80b4b365a0319a786293fd7960
  • imagemagick-6.q16_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:b1547657cc7b2ea5856ddd6e704133457580ca23
  • imagemagick-common_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:908deec1308ee77755fd9faffbe19b6e7a0b7e95
  • imagemagick-doc_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:950bba8e2365917cff4157442bb198d8213c678a
  • libimage-magick-perl_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:92c1877eb6fe8c6496e7fcb2571bc2651e19b516
  • libimage-magick-q16-perl_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:fe571a2c0ad0b00189b0b5be6a6a733a72a649d8
  • libmagick++-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:a943645d52f3f1f1321b65dae30a7f03670b1a9f
  • libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:ffb07aaf309f2892ccf185fdf4335991357c5e7a
  • libmagick++-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:cf823e9deb641870b52b7c872e7a49fd9ef8b799
  • libmagick++-dev_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:c6e3647f1ffa7aa3dfbdeea09124b48c81cbd661
  • libmagickcore-6-arch-config_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:378ecea76f60bfc4c23c6531458431324177d81b
  • libmagickcore-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:fe1dede7a6a3be326561121ea2fb5d7cd2532676
  • libmagickcore-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:4d4a106ecb0e027a0c4f9eec4cbe9e52633e43e9
  • libmagickcore-6.q16-2-extra_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:f8a57013fa1c9220680efa9a82f2ee58e9eeb755
  • libmagickcore-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:2fb42237cffa689c7064225a7c30d44b6a6c0dc2
  • libmagickcore-dev_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:9b4ec268fb3e892a93fe59648ee75d079c26f6cc
  • libmagickwand-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:278596f45a7e8230028595a2bb453395545aa892
  • libmagickwand-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:aab19aef95be76c43a3c8dc1c51975d8c9832836
  • libmagickwand-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els65_amd64.deb
    sha:d765b35fb17138492043fa78c1446349da3b04ef
  • libmagickwand-dev_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:d32fb90a654b4ce6398dfa5d6c7c7981ca724107
  • perlmagick_6.8.9.9-7ubuntu5.17+tuxcare.els65_all.deb
    sha:002dedd7f87a82eccdf0254b0d6c059e7a52d3c7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.