[CLSA-2026:1789486747] Fix CVE(s): CVE-2026-86421
Type:
security
Severity:
Important
Release date:
2026-09-15 15:39:16 UTC
Description:
* SECURITY UPDATE: memory leak in the MSL decoder on group end tags - debian/patches/CVE-2026-86421.patch: destroy draw_info for each grouped image in the group cleanup loop in MSLEndElement() in coders/msl.c - debian/patches/CVE-2026-86421-1.patch: bound the group cleanup loop on msl_info->n in MSLEndElement() in coders/msl.c, so the added DestroyDrawInfo() cannot run past the base of the stack when a second re-uses a stale numImages count - CVE-2026-86421
CVEs fixed:
Updated packages:
  • imagemagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:44c6508f5b7298112d2f0a19fa539c3484be60d9
  • imagemagick-6-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:25d42e274da500bf190d5c293f44dac6a851743e
  • imagemagick-6-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:1ce5c5aca06e87d67235cd7dea13e92c45075b01
  • imagemagick-6.q16_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:d68c304535329baa2ba4114a0f47acdd73a13667
  • imagemagick-6.q16hdri_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:dd3590a68d74f63bd863dffb54d86d2830681b78
  • imagemagick-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:8217301ea70bfb418aafdc6a4daa71b915ce3c67
  • imagemagick-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:6eeba9dc67e6715fa51c9f0b45ee6dd980700cea
  • libimage-magick-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:5a339a881b193f76cc4b95a83e7e234c0774876d
  • libimage-magick-q16-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:ebf156bb7cc937c28e40f1ce77ee7bb1f700c39f
  • libimage-magick-q16hdri-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:e2582f7c521173205e2ec4ea1bd257b4487fd41b
  • libmagick++-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:fa9ffde22258d090d3acd837a0e3f7ea491326c7
  • libmagick++-6.q16-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:d19cb67fccb2676b2caf43aba884aa7274bf206f
  • libmagick++-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:13258efe8e91ab1522e78a13bf5e514e6cd961d3
  • libmagick++-6.q16hdri-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:ad4ca457b02254314854fe505cd758f986a153fa
  • libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:10571497ec7238430fa2aa46c4f83e7f4a039ca3
  • libmagick++-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:ebd04cf8d6f76ad17a32b730deeac36194f3863d
  • libmagickcore-6-arch-config_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:517d04935e73da2d9e5970a71400446540848b8f
  • libmagickcore-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:537d62937d789b4a69e4ce847c07fdfb2af7f719
  • libmagickcore-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:ac72847d540d06aa7711cb48d545778d7b85d681
  • libmagickcore-6.q16-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:da9a3acd97c29ee6d13a114501cfc8ea347a44bd
  • libmagickcore-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:19e6c475a1d959ec1aab04fb21fb5282b12f49ff
  • libmagickcore-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:734d74405565cd8b732a0bc3cd5e6a4e789bf625
  • libmagickcore-6.q16hdri-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:9441e0910427a14a0aaedfb62d82bf85a07f25aa
  • libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:33b7c32b946d900656eee128d046a2f514e181d1
  • libmagickcore-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:a33594536f460dec9698ebd744e6effc94d857b8
  • libmagickwand-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:c66e652b978ae695f0475dedd8a3570dbeb9ff05
  • libmagickwand-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:ae161ad425b57d202da5597c176fb27d4d5e26c5
  • libmagickwand-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:6afd67c49b7e9b24f1952b27a893ddeb86e3a030
  • libmagickwand-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:aa9566aca92b9d23a47d2763aef318bdb0e96c51
  • libmagickwand-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_amd64.deb
    sha:29300363481d7afb1233f3fecf6cfb89440a2cc8
  • libmagickwand-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:569a600bd4ba1f0d335abac7e8c5e797bcb017df
  • perlmagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els49_all.deb
    sha:635ea4e31cecb1d1322ab74193ae9ba2c379808e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.