[CLSA-2026:1792168745] Fix of 14 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-16 16:39:25 UTC
Description:
* SECURITY UPDATE: path policy bypass via a dangling or looping symlink - debian/patches/CVE-2026-105081.patch: deny a path policy request for a symbolic link that does not resolve in IsRightsAuthorized() in magick/policy.c and add is_symlink_utf8() to magick/utility-private.h - CVE-2026-105081 * SECURITY UPDATE: resource exhaustion via MVG macro expansion - debian/patches/CVE-2026-106573.patch: limit the number of 'use' macro expansions per DrawImage() call in RenderMVGContent() in magick/draw.c - CVE-2026-106573 * SECURITY UPDATE: policy bypass via unbounded MAT decompression - debian/patches/CVE-2026-107210.patch: cap the decompressed size and expansion ratio and check fwrite() in decompress_block() in coders/mat.c - CVE-2026-107210 * SECURITY UPDATE: memory leak in the SVG encoder on graphic-context errors - debian/patches/CVE-2026-109262.patch: free token and primitive_info before throwing in WriteSVGImage() in coders/svg.c - CVE-2026-109262
CVEs fixed:
Updated packages:
  • imagemagick_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:5a9589cea16731d40ce55e514be5d9e49a8a3540
  • imagemagick-6-common_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:7d28ccf5ee80e93c12f9bfc11d9853b24b39f61b
  • imagemagick-6-doc_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:1e8481752a1ff5ed24f4f39689089436c43d62f7
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:c06a4c9a98944dd5c1c92b891945b2aeed2e1524
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:035aed1283b482c2642736b0268be7823fe70c83
  • imagemagick-common_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:a326478de53d7e06c985e3820342ef5e8fc2d83a
  • imagemagick-doc_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:fc359b342375565fdc2dd819070930167da14736
  • libimage-magick-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:06d1c4044fa320c54f7611155ff02b16f61f32e7
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:1bd2bf8b336d3679d0076bccf78255004f64f66f
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:ba03fa4050359d611ad7cbcbae9cc7c8f091af60
  • libmagick++-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:7951d6055cc77e3592d8a0957dfc9892edf04b8a
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:c5e4901fc1008ac43e3ae4a7d61288b2e87fa328
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:c83eb738b4a4050ef0d7ce9ce95e63c0b4f249de
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:30835e2c5ce669a90661e4e0b1e6bbb3951d8e4e
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:b35ea660f78ac939e9b14583603737fa746f16d4
  • libmagick++-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:8e3efc0641ef14898c228cbd8852fd7e0a5647c3
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:e686f721fc711a268c18d113782e17cae2976da1
  • libmagickcore-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:c99629ded316e0f799481efd7da00d2bc258a22b
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:6c459601e73a59ddcf439dad17527f21069fc1cc
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:bcbd6ff6a502e6f458e7ab9fd832e6408503126c
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:cc5cbbb33379d930ec98e8a724a92015982e0615
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:f2fb4eb0b6ab5fb90883c55ad8f02fbc3abf00a4
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:b0706514d22fb71295da4560fa5eaff4c3ef7d21
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:8655b78bde555f90b5c0df0859ba987536f2945f
  • libmagickcore-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:fc407a7fac9cd52c77706bc9f8127048922f338d
  • libmagickwand-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:4e29648ea604ec311e095bf82ac0412443fc1866
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:d3d7d27690147e19daf389b6644674f0094c8aab
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:3f8d451030ce856df8e9d34bee19d90b19b272b2
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:80f88eff6516e718e28ff33bc1b3361f0fc3e077
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_amd64.deb
    sha:eae2159e35c407a36f25151ede14370eb20b9923
  • libmagickwand-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:641d1d8107f3b8742ea8f42e85e6981e7c7c520d
  • perlmagick_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_all.deb
    sha:d74aa5916d942f08b32632004bf7b0fe9301e3a3
  • imagemagick_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:caa5132953a0c58bb5ccbde55e300e2c7fb2708f
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:0c9796b7e6f22769a16d63a86bb4dc2d2f1963b2
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:1e8eb45d6c470d1068ea4cc8be76da99b3836b83
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:49fbdf679c1d2a2452ffba4c4364ca814b7a5775
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:372466bd9c26d266d3b0c6a830e97ab2073af641
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:808b5c67bd37b9ddb339504cc50966e84113ca51
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:1cc895a1ab9645d5eb773145e973a06ca1250961
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:481dda3e6e9b9aefd59d4d118257b360a88489a6
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:163fccd4475ab37c863858ecde44a5562b64e05a
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:f0ba0bd82bc9f077017c6f6188c43df772b4566d
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:10c13d9765f62e861873b2b7d727f06bc97e6771
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:b65b93e3096a38ae517b060cc04e548f78f0a4dc
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:b8f99a7c77a1aaeac01c1e83df5ef24cecc04801
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:883accd15e90b4584aeef8a1859a253338a41a15
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:39e811d859bb8c2813db46bc978cae6622a17473
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:c0bae3d13931f55c37b873030c6420c4dbda4518
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:5f26b071a8a5b3572c60187a0fe5261506b1020a
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:9d256d2a102fba5f5cb20ca1719a12a306412745
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:08c0289ab7e462da21defdaa72702ec1990c3c07
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els46_arm64.deb
    sha:5aa4511e2f02e8787c781d3455262e5b740eb55f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.