[CLSA-2026:1791975274] Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-14 10:54:47 UTC
Description:
* SECURITY UPDATE: infinite loop in the XML parser via parameter entities - debian/patches/CVE-2026-106568.patch: also check parameter entity ('%') references for circular declarations in ValidateEntities() and ParseInternalDoctype() in magick/xml-tree.c - CVE-2026-106568 * SECURITY UPDATE: uninitialized memory read in the TGA decoder - debian/patches/CVE-2026-109259.patch: zero-initialize the TGA header in ReadTGAImage() in coders/tga.c - CVE-2026-109259 * SECURITY UPDATE: memory leak in the YUV encoder - debian/patches/CVE-2026-109263.patch: release the resized image when the chroma resize fails, and the chroma image when the scene loop exits early, in WriteYUVImage() in coders/yuv.c - CVE-2026-109263 * SECURITY UPDATE: PostScript code injection through font names - debian/patches/CVE-2026-109275.patch: only pass font names made of alphanumerics, '-', '_' and '.' to the PostScript renderer, otherwise fall back to Times-Roman, in RenderPostscript() in magick/annotate.c - CVE-2026-109275 * SECURITY UPDATE: memory leak in wavelet denoise - debian/patches/CVE-2026-109278.patch: release the output image on the resource and memory allocation failure paths in WaveletDenoiseImage() in magick/fx.c - CVE-2026-109278
CVEs fixed:
Updated packages:
  • imagemagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:bcc3820b8890220eaaf0b093584d50feb293618e
  • imagemagick-6-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:b6ceee44386c67e7ad78d77d680ad17022390893
  • imagemagick-6-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:bf18060de961edb11f37f303261b8a8501266f62
  • imagemagick-6.q16_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:3c39927d72ba657b2d0c3815822e1854f493f057
  • imagemagick-6.q16hdri_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:aa9a392face6ded0df1afecf2a638dcc17142f1b
  • imagemagick-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:77c8a6f57aec646cb6250ee54055a5f316f6e839
  • imagemagick-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:c9d667f8fc315760482e703a84ab9077361ed2e8
  • libimage-magick-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:e9e870d93a66167c95fcb5aa23fa5df6061e3248
  • libimage-magick-q16-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:ac3794d11d477a1134719fb7713234742b640c5f
  • libimage-magick-q16hdri-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:50111e296bab39c5ac85d0c42a8bb389935e2ddc
  • libmagick++-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:6436679a44c8278ff1ce7b6bddaa97e02df8133f
  • libmagick++-6.q16-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:ea9c849b681ebddae4b7084721bf7bac9e4720e4
  • libmagick++-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:d59a0cc48785a372919979d9caa61fe42b59dae6
  • libmagick++-6.q16hdri-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:e11cf75f37157428bc39e6b809add06ee5b4754d
  • libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:f5890d31ed249069665990a931ad30c371ce2b80
  • libmagick++-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:2c0f5a6c37213e5625aae7c462bdfb7d1bba6f59
  • libmagickcore-6-arch-config_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:cde007583cd61d9400a5593d00c4757ba094c696
  • libmagickcore-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:44e284824af77b3dcd839b8f4b8a57fb1164e077
  • libmagickcore-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:1d81e6e51a46af5744600507b2a5ac83195b2456
  • libmagickcore-6.q16-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:54060579a16d4303eb8a953b53d5b60edc133950
  • libmagickcore-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:f657d1a5dc6ed68901ba79d754fb72bd048d1aad
  • libmagickcore-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:7975ffcf5f94ec48255e41ceb3ad8e8fa7a9a844
  • libmagickcore-6.q16hdri-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:befcf9f7b62fc7070db64370cc0caed98788d35d
  • libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:7cdb669eeaa5333aefec87510d204a04c511d586
  • libmagickcore-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:cff9281e69aada3a26540072b01d6f5acc8ad6b6
  • libmagickwand-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:4382f353c7b7b082bd6093a5355de0c8ef2e1463
  • libmagickwand-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:60990ad2fb0437bb600f2c924fad43824ef805f1
  • libmagickwand-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:d4ad6ca727a7d01a01bcea613c1fc049beff7a09
  • libmagickwand-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:87c98d3fe711afca6867f90c848f36db7a005ac0
  • libmagickwand-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_amd64.deb
    sha:9377aa6b948cd3d66601448bee83d7093824fa6e
  • libmagickwand-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:cce6c96f023e46eae6fc8b2eb0b879435eb9e5a9
  • perlmagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53_all.deb
    sha:8ec74e13d4c0764a139347730f314377e0ec82b6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.