[CLSA-2026:1784275402] Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-17 08:03:54 UTC
Description:
* SECURITY UPDATE: off-by-one out-of-bounds read in morphology kernel validation - debian/patches/CVE-2026-56361.patch: reject a User Defined kernel origin equal to the kernel width/height in magick/morphology.c - CVE-2026-56361 * SECURITY UPDATE: integer overflow leading to heap out-of-bounds read in the PSD/PSB RLE decoder - debian/patches/CVE-2026-56367.patch: guard the image->rows*psd_info->channels allocation size against integer overflow in ReadPSDMergedImage() in coders/psd.c - CVE-2026-56367 * SECURITY UPDATE: memory leak in coders that write raw pixel data - debian/patches/CVE-2026-56368.patch: free quantum_info on the OpenBlob failure paths in coders/bgr.c, cmyk.c, rgb.c and ycbcr.c - CVE-2026-56368 * SECURITY UPDATE: out-of-bounds access in ConnectedComponentsImage() - debian/patches/CVE-2026-56370.patch: validate the CLI connected-components:keep / :remove indices before indexing object[]/colormap[] in magick/vision.c - CVE-2026-56370 * SECURITY UPDATE: heap out-of-bounds read/write in the PCD decoder - debian/patches/CVE-2026-56378.patch: bound the write pointer against a per-plane sentinel in DecodeImage() in coders/pcd.c - CVE-2026-56378
CVEs fixed:
Updated packages:
  • imagemagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:4ac2d5cccb9d19684a2887f9a455852c53b93d9b
  • imagemagick-6-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:bff33421f1e361958dc11cf41921215e9bf91b37
  • imagemagick-6-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:f132d69fc7ab31894617e3ca6874e1017a72d1b5
  • imagemagick-6.q16_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:a75566cdc3a349981635f4b3b15f550e33280b98
  • imagemagick-6.q16hdri_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:27134c7d256866afcedbcd388eda84663bb90325
  • imagemagick-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:163951ad1794c84fd329b0c77d793cbeb02abf85
  • imagemagick-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:c944ace596fcac3485001eb257fce896df754d47
  • libimage-magick-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:99aea6261ac165702b885941534d69f73ddabec6
  • libimage-magick-q16-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:5edaca8d341b68182019371b85f709b7dbecdd03
  • libimage-magick-q16hdri-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:4351f47dff390d62cb6c759023bd14c7aa355281
  • libmagick++-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:1d5f879bae73aaa700d23bcf95e08b4b7710e78c
  • libmagick++-6.q16-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:3d2ee3d20feee06b2522b2c976c4bab36d851ab5
  • libmagick++-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:13ad86f6610a49c1eb70b14be58c4604dfb8a170
  • libmagick++-6.q16hdri-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:6f9875eaf48922571bbab27aa3f993f3ebc67d34
  • libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:d3ea2f974b248a327637e34bb5c2ebef04313c79
  • libmagick++-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:b9d591e768ed62f5ebd8ca7e528a4650945da100
  • libmagickcore-6-arch-config_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:396a89c08f7bdebcb03049de224b2823b522bf20
  • libmagickcore-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:01050c0793e5c50d8407e7dfe2fa7db5f4ee5674
  • libmagickcore-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:8bbe0a87e76b33d78b320ec06857bd00b8fd2e24
  • libmagickcore-6.q16-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:73d8088b41f259bd7486031eb0b32e5a6ce4b663
  • libmagickcore-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:b07a0d57352aace2b43083da785901c97cb7437e
  • libmagickcore-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:f8cd2ee78c3f69aaa34ce11fc7a35ed28c3ee5e4
  • libmagickcore-6.q16hdri-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:111b77be929d74e6770ac856d16f7ad1f2563ff3
  • libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:79214e7e14730edf0405fd37de6683c079e28e25
  • libmagickcore-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:e67baa05a50c20bb513b945ebefecfd017409227
  • libmagickwand-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:c7601284aefa51511d4fcc9d38af9afede3ce923
  • libmagickwand-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:658827e4902f91a6f0c1dc0d15f324edc172f788
  • libmagickwand-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:7c3fe21ee78399dbf6e45d71cb8dac520e76c052
  • libmagickwand-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:c89926cb0cc5d41cc4ee90ac2f97162f16fa7ca1
  • libmagickwand-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_amd64.deb
    sha:463f1a5c8b9fb9b0709935dca864deee4a171000
  • libmagickwand-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:82baad57c8b29886a77aecbdadc169667df00246
  • perlmagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42_all.deb
    sha:b9211beba982ae5add12fdd53e0ace4b013a9ef8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.