[CLSA-2026:1784622009] ImageMagick: Fix of CVE-2026-61866
Type:
security
Severity:
Important
Release date:
2026-07-21 08:20:34 UTC
Description:
- CVE-2026-61866: memory leak in the JNG encoder: WriteOneJNGImage (coders/png.c) leaked the cloned JPEG alpha image and its image-info when opening the alpha blob failed; destroy both helper objects before raising the writer exception
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els6.i686.rpm
    sha:8c01438604aa7f5140037c71341bc0f880b42203a41d2cbd0277f7be3f11908d
  • ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm
    sha:03df790c5b8ce6431450bcec7d5f7f6fff16b1def8fa6c57d5aeceddd64ff8a1
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els6.i686.rpm
    sha:203dc978dde0bf10f6d45011ea8fe3cef95e9e5259413de0691fb7145456ceb0
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm
    sha:c9b62828565a0d749c172d40df68f686cedcaaa4b9328719e507927363958618
  • ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm
    sha:9dc437a1eaf6d908754431ffd35038acab8b3d86808fcaf9bb7be568b4d71f34
  • ImageMagick-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm
    sha:912b04ad60da9154547da830df0a09d0355735a5f2a1879e411a85f83503581e
  • ImageMagick-doc-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm
    sha:a14ea18b2ef9dda585d23eee2211684d5fd4a40625eb068c06fd7a7d9543aa2a
  • ImageMagick-perl-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm
    sha:c834d00c41145607bdee34d3ec4c5024940043635ee57e7e8b790a24fdf55ba1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.