[CLSA-2026:1784810162] ImageMagick: Fix of CVE-2026-61866
Type:
security
Severity:
Important
Release date:
2026-07-23 12:36:28 UTC
Description:
- CVE-2026-61866: fix a memory leak (CWE-401) in the JNG encoder (WriteOneJNGImage) when the blob for the grayscale JPEG alpha channel cannot be opened
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els23.i686.rpm
    sha:e46fa02999ecbc8135d0a25a62b7efdfe9d87286db384229c2b8aff175408b7d
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm
    sha:73e1cb3c07c8a7d4c476d9734fe496821427ae1c63d87050c148897f773eeabd
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els23.i686.rpm
    sha:2f4a9bc516bff8bc14e4240a3780668c653537c8a1d15feb988f8dca3758958e
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm
    sha:ea5055cdbb68acf70c07bd5865c2fd2a189526b0f36084923ab4ca6c63ecf39d
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els23.i686.rpm
    sha:34473b023d9041a711f86f250d0dc04907d117e65423a94160fbe09bc16e647f
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm
    sha:24e8dd8bc4e4226d73579ef6c6cd256e2f01807317aa07037b5fc2142a6fad5f
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els23.i686.rpm
    sha:f1a10af35184328d48ac76713d95773bae67d72967f53caf6bfb51606362dab8
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm
    sha:6c45852105256a63de8e97d904d9893a8777ccd73c794b8ff78d3b44de85707b
  • ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm
    sha:cecd0f0af52339169a51a9156162a28eb83408c3aa2b1355c93c99a968c0db35
  • ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm
    sha:d21ef46b33b9e96782a33d62106e1202cb03f66f8904bbf317e648cef12c5484
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.