[CLSA-2026:1790181479] Fix CVE(s): CVE-2026-93586
Type:
security
Severity:
Moderate
Release date:
2026-09-23 16:38:11 UTC
Description:
* SECURITY UPDATE: use-after-free in ImagesToBlob() on multi-image writes - debian/patches/CVE-2026-93586.patch: add SyncBlobStream() to magick/blob.c and call it after each WriteImage() in magick/constitute.c and after the write in ImageToBlob() and ImagesToBlob(), so the image list and image_info stop referencing the buffer a previous frame's SetBlobExtent() reallocated - CVE-2026-93586
CVEs fixed:
Updated packages:
  • imagemagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:3164a8256d6a3d021c861a6951ad824bd062d37b
  • imagemagick-6-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:10948ca3aea6723ec414def26d3a8e1cf456f4ab
  • imagemagick-6-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:78e0d6b82d123196ab2be10bcfe3925dc1fd850e
  • imagemagick-6.q16_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:d37f8032fedc06d84888a030bf583116777124a7
  • imagemagick-6.q16hdri_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:61af101e1a768a3c3747e9430b4105ea3565ecd4
  • imagemagick-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:6679bf11dba5450a81ebe9720f98574cf893e678
  • imagemagick-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:dd9704f0e28549e8c82715bcc7a7004fb126c6f6
  • libimage-magick-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:747265d3b38d48f69f0432101a34d8f0ac1839af
  • libimage-magick-q16-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:56ebed2618c9918a9537708937b8d07ea833ef72
  • libimage-magick-q16hdri-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:f7f2644985768224206d887a07e44a27a5a68bde
  • libmagick++-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:252e49370565743ce032a6a4ba4f0e6ec6e9e34e
  • libmagick++-6.q16-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:581ebf34e7fe85ad779a1b4fbbc379ad8ac1ed50
  • libmagick++-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:34475e4c5a0f4680cf536d8263a792d5694866ca
  • libmagick++-6.q16hdri-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:07510a8c664df7dad756d9eb15a6e7adaf7e7a7b
  • libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:afa9a1c846173522eaac10e0d91bc74f9dcdfefb
  • libmagick++-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:35d50f9f9cb122505955072d7016f6163e5d601f
  • libmagickcore-6-arch-config_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:d89b7e11a856cf67d291a97254efb871254ea06d
  • libmagickcore-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:b7d2be47493f5b81079b5e74c3dd73ff6c24584d
  • libmagickcore-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:716c86a32b592f5e83ffecb859656d9883746453
  • libmagickcore-6.q16-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:0b097c92256e7457e4cb4603223190a6fbc6709e
  • libmagickcore-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:a1b7c53c447dba245dc5cea67a4795856b5bfde8
  • libmagickcore-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:ede67fc5548d220af644f5e0861b45a48d19131f
  • libmagickcore-6.q16hdri-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:9bd95a33be7959947ebc2acde12ac3cc61d1f9b0
  • libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:9c7b8b63ce96d3b2c46b463b53353b91db570168
  • libmagickcore-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:b0927a7606b3c5e1bf923d0324d6f7f8599b604d
  • libmagickwand-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:021cf36a887e9f1ae333d6e41535fb39f87b64ca
  • libmagickwand-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:ab7f51412eb97a08fda97329de415ca4b9d5fe77
  • libmagickwand-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:fda105f26dc4e3db99cb78db49a917d0737ffe92
  • libmagickwand-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:3c500d8b2dead4841b3c127816ce2f57eb7be104
  • libmagickwand-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_amd64.deb
    sha:84be61848b9f99bc3cc4672e0b56e6b3291fab4e
  • libmagickwand-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:5ea652fe24cbe0de94d7182c51101b78cc31887a
  • perlmagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els50_all.deb
    sha:f1e5f61fa4eca2f890a0ac801b26ad59c781defa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.