[CLSA-2026:1790949439] Fix CVE(s): CVE-2026-93586, CVE-2026-93587, CVE-2026-93588
Type:
security
Severity:
Moderate
Release date:
2026-10-02 13:57:37 UTC
Description:
* SECURITY UPDATE: use-after-free in ImagesToBlob() when writing a multi-image list to an in-memory blob - debian/patches/CVE-2026-93586.patch: add SyncBlobStream() and call it after WriteImage()/WriteImages() so the owner image and image info track the live blob buffer, in magick/blob.c, magick/blob-private.h and magick/constitute.c - CVE-2026-93586 * SECURITY UPDATE: resource policy bypass in the PCD and HALD coders - debian/patches/CVE-2026-93587.patch: check the list-length resource limit before cloning image_info->scene frames, in coders/pcd.c and coders/hald.c - CVE-2026-93587 * SECURITY UPDATE: NULL pointer dereference in the PNM coder - debian/patches/CVE-2026-93588.patch: check the comment buffer for NULL before using it, in PNMComment() and ReadPNMImage() in coders/pnm.c - CVE-2026-93588
CVEs fixed:
Updated packages:
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:e4c23aca8fff33012be61e044241cf7fe4caea9d
  • imagemagick-6-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:388854ff9516854f6ec78ca26c21c0293ef0ef42
  • imagemagick-6-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:4b29680877f5642d419fc7f6fa0b94fc1dd0320b
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:c6e6c2b94a7255ebd4ac43cfb2f6aa6f84283511
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:00f18eb63e143416049d6349fd6b61c75ac6fb2d
  • imagemagick-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:cdecdf49945bdd8a55d4d98d1d91c93aabe51746
  • imagemagick-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:9e8b277e6232dcd96feefb7770c86569a4748980
  • libimage-magick-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:66f8f4171ef5166fee4ac9d2e838dbc45967d81a
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:209ec4f6b3a39629efcd9664bc95b389f2760f66
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:3baacd5e8086433feb22419a62c3a9eb50477649
  • libmagick++-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:ae482f36eb2e0b37f8a0894753ac5da9eee50ab7
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:8c1b011d8daad179a269a5dd8993452144d018c9
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:a29c111b2f1edd00fbd8d5000fd90916335efb0c
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:96e0527585ea9aa252614dde3bd116763671bd02
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:b5159ea2e0be21a1130d66b374be3fecd3600a54
  • libmagick++-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:479e3874cb2ea3dcb746d258168124b5035554e1
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:59b24231ea172fed0c6584c91da0166f9f5c5376
  • libmagickcore-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:89a50f022625030827bef9ecb76ef3234282a892
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:aa5a547db70ad5f410f8d1389c275c0e6f3beb54
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:1c40f165ed0b881e143ce449d8f4e9db39c96b54
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:41253e82fc9b4d527c5ff903625bd2530ae798eb
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:4156f4bd1b6521c8268f48f186905d247b401af7
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:3637ebb94234b24996a3a50313a20d4c2a36dc93
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:83fe14a35775a6bb317b60f7e626cd8a09fcf52f
  • libmagickcore-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:1ab83fca606245c87dff01556f849efdb4642c32
  • libmagickwand-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:4c4f206047bcc7c842bede3b49e2d8ca880a154c
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:4e42adf8e62de576bc415efd0c5b5afc3e47dd45
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:f01f1b549c9f30d42580c35022c7b29a948d6e83
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:39762444ff434859a317f27585de6ca48f14eea4
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_amd64.deb
    sha:8dc0d55e6aa3b2d6205c15b3e2824235562cc19b
  • libmagickwand-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:4427b04c1c2102d3f49ce972468a0b2c765d88bd
  • perlmagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_all.deb
    sha:0423ac1bcf5fb025acf72f40f460e7d2578032eb
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:ba3b7427078c521dd4ac46fe91a398ffb9f6f385
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:8def4539596fbe1ffbb7d81ae554e2e480c17bcb
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:cd32422d8f527fe6f33387bc35e11de9157d2275
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:8cb1548230a3fcdb81a4f7f8b3d804845f8e420f
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:5e2aec961c27c63f1c1d0adda8f05f2cdfacf418
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:4325537b3f4980f55bc97b7a8ebc091cfee3d9b1
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:0485e046267ef453053d48fa7bb65e9d5885daee
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:b91fd11ee04bac531c7c48989c68121616700784
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:49b28ca2692215b5100fb7d117d9f3b732991e23
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:4f07725cd95cb58b6f2dd2b4373d1670a3f523f9
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:bfdda885524d852a0287810502939d2539607737
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:2d8101a74ab2a61d5ed917a7dc9039727f704474
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:47cc80e721776d74ae8109fd4a7c9a862e15de74
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:819f042a7c0862d424352c5251e098283f95a9cc
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:bb473cb3f607ce440b9b422c03c1c0b9f6295038
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:6a0ea73ea9c92af2eb8cc01c2726271b71d28f45
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:af60ef472e3d77df8efde30d3eeb555ad946e262
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:7ecac58da52fc92b87c3d1e860c1f1863ce8e584
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:41f3acde053a6149bd917c07be9c1c59751e5e09
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_arm64.deb
    sha:69200eafbbe353b097ade302cbcf07589953bf32
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:43cdcc350470e112346e876ac488033962d6ea05
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:b964dd9f72c15a9ce9fc6af590cbacf4159acb65
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:55ef5d03424ec7bee4ed8f3d3dc157530932c3b2
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:3bb1990ebe9c3a30b6506beeb8086d9a06f88ea4
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:8c14cf110046e3e983c671323b369e278b6b3ba2
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:578b06ac1f84e4b524cfd0dfdd40217be5dafa8e
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:242ea6ac1dbf3ec576404a9c88986aec5326756b
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:ed7b3458f74ed148a0ccf683decf81686708c595
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:630fd502d6a9e22d0ad8ac8da39dd5f57810b8ee
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:cfd6be7f14e1eab4a3a38d4d083e99b3ac795054
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:3a5e8fb3e7e296c3ed39143e8a822523c8d3ab0b
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:314f549063b6f33dfb95468045c9d12d8007d07a
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:298fd5b30b0bb34751876144a43be7f36896a170
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:1eac5ef048766c3be1bf5b38c7ecc27744c0e66f
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:91f15ab2945d63e6785283bfcf5ef3761c8e544b
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:3bb50a17576586c77822c66080a7ca5370fae7ba
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:1e74cdab13e5a736a844863ee583e3f3e2a852c9
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:e453aa9b066ae777aefdfca727fabc3f7c942084
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:40a1982a202efc9c01fd40312296ebe1452c66af
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20_armel.deb
    sha:83fdc41b6f287b43e08aefaca3524353f19e4886
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.