[CLSA-2026:1784275492] Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-17 08:05:24 UTC
Description:
* SECURITY UPDATE: off-by-one out-of-bounds read in morphology kernel validation - debian/patches/CVE-2026-56361.patch: reject a User Defined kernel origin equal to the kernel width/height in magick/morphology.c - CVE-2026-56361 * SECURITY UPDATE: integer overflow leading to heap out-of-bounds read in the PSD/PSB RLE decoder - debian/patches/CVE-2026-56367.patch: guard the image->rows*psd_info->channels allocation size against integer overflow in ReadPSDMergedImage() in coders/psd.c - CVE-2026-56367 * SECURITY UPDATE: memory leak in coders that write raw pixel data - debian/patches/CVE-2026-56368.patch: free quantum_info on the OpenBlob failure paths in coders/bgr.c, cmyk.c, gray.c, rgb.c and ycbcr.c - CVE-2026-56368 * SECURITY UPDATE: out-of-bounds access in ConnectedComponentsImage() - debian/patches/CVE-2026-56370.patch: validate the CLI connected-components:keep / :remove indices before indexing object[]/colormap[] in magick/vision.c - CVE-2026-56370 * SECURITY UPDATE: heap out-of-bounds read/write in the PCD decoder - debian/patches/CVE-2026-56378.patch: bound the write pointer against a per-plane sentinel in DecodeImage() in coders/pcd.c - CVE-2026-56378
CVEs fixed:
Updated packages:
  • imagemagick_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:d3811f5b2296fd0a8bfbddfdfafe7c3b0af512d6
  • imagemagick-6-common_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:02fd98ee2839a6de44732ab064e8176a2b8e7023
  • imagemagick-6-doc_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:33490c9ac03788c6ec8cbfbf34ed79a9d4dc2bca
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:1f11a3a82964b24c9c7d17f17f2ae3f9e49f895e
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:2ffa604bd871debcf3065975df0a04f8d41c4709
  • imagemagick-common_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:c9dc5fd9f6912b4cebd15e2ca43700943b7460bd
  • imagemagick-doc_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:e2c9b34d6ee4b1191f8343b36cd9681cad9986a1
  • libimage-magick-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:6775a48801abd4f9fd8d335dfa81b89cecddf4e6
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:8ea2e0dffd4e048844a69ff2f4025f8cfa1d3d06
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:8b7cdcde4b86830433c859f6477cfe550bf42f76
  • libmagick++-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:f3375a63e4939c0cc8c65e2a5dc73cf777b3e710
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:b124cebaaacf965ce49dc437cdd8477f2847b6ce
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:1b077a1d7e8b1a5f56218fa2c659cdec5d174549
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:6e2a424eb6b158e603413ae03fda2772de7baed0
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:f2e184eee733b174071ea15ee83ac72b76d80541
  • libmagick++-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:37b73029b299969e2fd4e25c1176c0a27c4d2457
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:d9700eb1a05d014a7423c31dcc8ae26eda666326
  • libmagickcore-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:c644d7feca1c75097e1e83b3e253f3c4d556209c
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:f79a61886dab6011a8a80f594a3e4f06031728fc
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:2a1f4f2343e646690e3b9acd8fa3d3cfd27663f1
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:6cd436e71c34b27c4899ebbe9a4e00116e5afbfd
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:b96c0e292a31af29619631f0238716b371ad6e92
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:45d547e7d9925ba17a218b8f92832567377f765b
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:59582a977268df50fe7e60b27dc98ee6eaf5bcdb
  • libmagickcore-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:52f9ae251b61005b9af6724bdebdbcfbee7746f2
  • libmagickwand-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:7cff068790a133957edd4b02bacecebb0906dc43
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:18cd466970b1ea26cefff899a3e73630edb9b87a
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:5dd51eee85d814e84421799b9fe60d32b61ffd34
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:ead366d49b9ee780c4c63355c9f27b949f0a48cc
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_amd64.deb
    sha:24394ef5124486233f2be0772fd501248abe9d8c
  • libmagickwand-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:a1b1ce2cbe18166d91dbb6232c16f25e5070cff4
  • perlmagick_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els37_all.deb
    sha:596ae34f070922994b6136b00f1d55a178f95ffe
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.