[CLSA-2026:1790929861] ImageMagick: Fix of 26 CVEs
Type:
security
Severity:
None
Release date:
2026-10-02 08:31:15 UTC
Description:
- rebase to 6.9.10.97-1.amzn2.0.32, which brings the vendor fixes for CVE-2026-53466, CVE-2026-53467, CVE-2026-55577, CVE-2026-55594, CVE-2026-55595, CVE-2026-55597, CVE-2026-55628, CVE-2026-56362, CVE-2026-56363, CVE-2026-56365, CVE-2026-56366, CVE-2026-56373, CVE-2026-56377, CVE-2026-61464, CVE-2026-61465, CVE-2026-61858, CVE-2026-61862, CVE-2026-61864, CVE-2026-61865, CVE-2026-61868, CVE-2026-61869, CVE-2026-61872, CVE-2026-62343, CVE-2026-64685, CVE-2026-86423 and CVE-2026-86425 - drop the TuxCare patches the vendor build now carries, for AcquireKernelBuiltIn() in magick/morphology.c, ParseEntities() in magick/xml-tree.c, WriteGROUP4Image() in coders/tiff.c, WriteOneJNGImage() in coders/png.c, WriteVIFFImage() in coders/viff.c, OpenPixelCache() in magick/cache.c and MSLEndElement() in coders/msl.c - reduce the TuxCare magick/blob.c symlink path-policy patch to what the vendor's IsPathAuthorized() does not cover: route the FileToBlob(), FileToImage() and first OpenBlob() gates through it - guard the vendor's IsRightsAuthorizedByName() trailing-separator trim against a NULL realpath() result in magick/policy.c - keep the remaining TuxCare patches on top of the vendor series
Updated packages:
  • ImageMagick-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm
    sha:3b9b7e047145712d121bb5b2171351d3081864c511361bda39f54a3828c6eed0
  • ImageMagick-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm
    sha:0fcc94a6f2268932263e5a9d210e9a095d02fd6cd5a8c77a469aa950f7585f9f
  • ImageMagick-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm
    sha:32ceec93f6df434373bdb97a29bc90398f17461c4097a1157bb1f703243d0bc9
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm
    sha:622f4567d53437ed7d6d3d4a5ca17f4d7ac043c005b1f5abbd971f6c9b685a7a
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm
    sha:d973aa3bdfeca1e3438269ba56c121d93a4cd1bacc6eb240bb290eb2a3911274
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm
    sha:8140ff5edbd8d3330ec14c59cbd3d5b154b7dff841b2f492eb002c5669a568b6
  • ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm
    sha:5fc74e44ccf6da3b60202ed8198fc22bb67949ecef1bcd7bebec5af30234a08f
  • ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm
    sha:4770aa196bb035279824f1b6ba253f2cd3573f110c69188517f0667cca9f7829
  • ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm
    sha:ff93003a9793ca3cb172491fbcc5b04e1f8bb5fd71601d80139c2becf9fc5e9e
  • ImageMagick-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm
    sha:0132b64043e3771a66c8b706916d1adeab263dc145fade0b3ecbe793c7baaf3d
  • ImageMagick-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm
    sha:a48ef25b5a32bbaec2a4ec8d2baba13fd137ce201b98cfa8eab40a8b27a5cef9
  • ImageMagick-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm
    sha:14063afde92e2c6e3efcdebfcb2f8fe24a5cae6b9ddbc0ad7673223c57e4a3e7
  • ImageMagick-doc-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm
    sha:1cf4c1c2c94d4e1b565855ad2c4ca16f1b25cf032afc7cfa3da48384f97baadf
  • ImageMagick-doc-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm
    sha:fa9ca05ce054ed604142ebe8e70e92a6b19c50caa9055881096f100ad183c29d
  • ImageMagick-doc-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm
    sha:6610c134af2f47e75b2d1b55eb71bca4e14f7fc43e33c4bf3006e2256a8adab4
  • ImageMagick-perl-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm
    sha:078a1db8599a402e933c53c4932340747b71b1b1476fe3693830d2c56e9e0b88
  • ImageMagick-perl-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm
    sha:ef9233e95b9aa5e668b9520899f204595f07ea4ed1f803b19d038f34e0b0ae55
  • ImageMagick-perl-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm
    sha:6728abf1dc42020a425b91a4ab39419c9f0dd61ade24a1a6cc669ef134eb4588
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.