[CLSA-2026:1784734364] ImageMagick: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-22 15:33:15 UTC
Description:
- CVE-2026-61857: check ResizeQuantumMemory() return value in ParseEntities() (magick/xml-tree.c) to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffman_image clone on temp-file open failure in WriteGROUP4Image() (coders/tiff.c) to fix a memory leak - CVE-2026-61870: relinquish pixel_info before throwing on colormap allocation failure in WriteVIFFImage() (coders/viff.c) to fix a memory leak
Updated packages:
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:e0f6a77a5ab24459f06a63eeaf4a3bb1e383e3dfe53df14fc196f0645e618d1d
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:6e1a65e8e9d511685f65855662822152631163fc8f903f2a8a34bc64bc1c24f5
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:746c63e6ea4b06a4779f4d39efdd54c48bf2ca2a65ae660cb81ae3d51736cfcf
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:de184456d027e759de3298de749051eef985f76e51898786e150d383892f74b9
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:577dd0ed9fb430c3c7fc30063e733fe431629396dd8f4ab16b6122eceb20343a
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:003014529317348d675f291a378dfe65e7e7e3fb1ee5334d68a93e4fcd69316e
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:588202a79f7914706b4114d8458ab57247b28d9dec9543d4d3d6cdcba9b69a6b
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:d6237c56376608840ca28e18cb9aff180dc4b57ff22b9b444ff8d79b53fae634
  • ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:c408f7aa723c33d64e5cde0bd2970b4f0d9e72aba5967f762f4952d56edd4ce9
  • ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:ca8c8356b3d57c1c81126616eb81ea3ddd937a217bf18245bb9eb18a08967815
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.