[CLSA-2026:1784368292] Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-18 09:52:09 UTC
Description:
* SECURITY UPDATE: off-by-one out-of-bounds read in morphology kernel validation - debian/patches/CVE-2026-56361.patch: reject a User Defined kernel origin equal to the kernel width/height in magick/morphology.c - CVE-2026-56361 * SECURITY UPDATE: integer overflow leading to heap out-of-bounds read in the PSD/PSB RLE decoder - debian/patches/CVE-2026-56367.patch: guard the image->rows*psd_info->channels allocation size against integer overflow in ReadPSDMergedImage() in coders/psd.c - CVE-2026-56367 * SECURITY UPDATE: memory leak in coders that write raw pixel data - debian/patches/CVE-2026-56368.patch: free quantum_info on the OpenBlob failure paths in coders/bgr.c, cmyk.c, gray.c, rgb.c and ycbcr.c - CVE-2026-56368 * SECURITY UPDATE: out-of-bounds access in ConnectedComponentsImage() - debian/patches/CVE-2026-56370.patch: validate the CLI connected-components:keep / :remove indices before indexing object[]/colormap[] in magick/vision.c - CVE-2026-56370 * SECURITY UPDATE: heap out-of-bounds read/write in the PCD decoder - debian/patches/CVE-2026-56378.patch: bound the write pointer against a per-plane sentinel in DecodeImage() in coders/pcd.c - CVE-2026-56378
CVEs fixed:
Updated packages:
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:eab512e710dae78db9f2d7d99ad62d1d988a6d23
  • imagemagick-6-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:d4fa87acac534e29b1155b35899a82042233d59e
  • imagemagick-6-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:96a8c8d712c3da0187bf815a7375702d02166c6d
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:c2994b7b9c54e29e77499c6ddc6e2be472e1b2a6
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:ae3cc353148cb2f9f3edec13fa32f126ed087a6a
  • imagemagick-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:0324b99d23be1b118a060be171c4e8d50dc21396
  • imagemagick-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:30fe5c1f8f1656ec2c31e787582228fc824183f0
  • libimage-magick-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:660ca15393629e62e73d32e81b8af2b001a87f6f
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:dbfb2cc8e80ac83691e5b12980d3c9ece3d5f78c
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:688d02cf0935eef859996bfae28b5c50c8c9e7b5
  • libmagick++-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:9139e9fecda8802e4981ee9bd214af8278b99f84
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:d524a25b793d8e17581cc562e71be4b1801b2a6f
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:7c1d83e51fd01e8fad3ae6209a72353cc401f1fa
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:66531534e92411d58b853efdb23954251c98014d
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:91f391a91b1385af1ddb6d019d860a6b43eca164
  • libmagick++-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:6047267bd7f8f7878bfb3854d65e91d8aa001e10
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:a476ab9d415278ec2c1545fb4b2a41b6b38eb0cf
  • libmagickcore-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:3af91a195f8cc1221f0c9317316c7dd00ef1d920
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:026dc70a449cdc624908407c9775c29defb2e8ff
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:1473748b38bdd2303fb777e4aa2380e4aad333a4
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:7deee922fbfd48836dfab96133a17277e64a7a1a
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:c9300b5caf2973330446026f3fb54b9c6dd8e758
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:a8f3330107ade301104abd52464236b5e7e440a4
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:e184f4f6ab8f5e2ea74d4581bb690edf237693f0
  • libmagickcore-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:4bbcb0d832a3e24e5ae53cb42772cf5f1e63be4b
  • libmagickwand-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:7c5f59ea219a82795ddc0841317f2cae6c04e81e
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:1245324998daa6d6d0fba7c1b5a5c02d87075034
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:d5d0d0b88465a675772d73d6fef579395ab2f095
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:e37b702274cf8933584f15b66bcc76beda6a1f15
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_amd64.deb
    sha:b2e939637033769d1f0655832384f6dae2b0788d
  • libmagickwand-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:42a837db66c060ba57c53ec4ebec4b146a233ee6
  • perlmagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els13_all.deb
    sha:e2d101ef5b79f3c00d0448b459428f7ccd82ed59
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.