[CLSA-2026:1774002757] Fix CVE(s): CVE-2026-25898
Type:
security
Severity:
Critical
Release date:
2026-03-20 10:32:43 UTC
Description:
* SECURITY UPDATE: global buffer overflow read in UIL and XPM encoders. - debian/patches/CVE-2026-25898.patch: clamp negative pixel index values to zero in WriteUILImage, WritePICONImage, and WriteXPMImage before using them as array subscripts into the Cixel table. - CVE-2026-25898
Updated packages:
  • imagemagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:a0efbd98fb2c9bae9232995ba603cc85754d8801
  • imagemagick-6-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:81f3a508b5eb6473d08ef8dd14c220cc1b9336d0
  • imagemagick-6-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:521494bf5cc60326e7c1eb0e11ffcde79af51ef0
  • imagemagick-6.q16_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:c7bda8be1fb3113a138889e275f18fcbed2fdcba
  • imagemagick-6.q16hdri_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:9d887d62d85beaee4997f74ccd7c543896f9fc9e
  • imagemagick-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:07fac9ea104f1269822eede1590cf2fcc76ed2d1
  • imagemagick-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:3830aff41a9b5c8ce72d32556cb082ab00f8ba6c
  • libimage-magick-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:d8852cf5111ecfd0b432be9761dbfbfae78cd42e
  • libimage-magick-q16-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:9c07e7533739f9b1d9a512b68c9c4c6af8b10dc4
  • libimage-magick-q16hdri-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:03b544127781bd82a7fd4a807fa6db178d6af775
  • libmagick++-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:a59aa1b6eb8df1b50cc807e92ee0d54ac357a037
  • libmagick++-6.q16-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:dcf57e0b893874b3166c43b7ab4fab83c4d045df
  • libmagick++-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:d0d402f37ce934427e0826b629fdc05963638c81
  • libmagick++-6.q16hdri-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:39eac5c9be3ca76ecff52ac4acc8176b935aaeb5
  • libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:ad99407b7f45fa041f992771fc83f2cc365e806d
  • libmagick++-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:0b5f5fd9ac31dded669a34da36ce97bb870eac91
  • libmagickcore-6-arch-config_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:bce1bc9f5c4138e1c034681852c01a1e7cf904c4
  • libmagickcore-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:9929a5ec3225fd0ce205cce38ddbc99c7642bc3d
  • libmagickcore-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:30d7223f91a7c53861c74716d37e0cc7f7bb4e5a
  • libmagickcore-6.q16-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:5ab7a5004adb6f874633d144dc6e578ab26408cf
  • libmagickcore-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:3060511616827fe7dab1a91dc115cb26f1e3ab55
  • libmagickcore-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:43ac10181d9af2aa256be64929035ad2c3d3e926
  • libmagickcore-6.q16hdri-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:f8a89bd2bb0ca4fa1a9a28cd160d20110889595e
  • libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:8ebff26b529c39531829d631728f70300fca03dc
  • libmagickcore-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:c04ea34e510186300e90d0e067d9f210caac60a4
  • libmagickwand-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:d5d58cddac8dfc5362a7158cc7e74d59da0f2795
  • libmagickwand-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:abc36028c7e355b43261191c110bb8d39c966b37
  • libmagickwand-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:0f05ab896d0e680a44b6deb58aec1b4734d319d3
  • libmagickwand-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:146c26b9a7518c534c74406f890bfcb2e62af0ed
  • libmagickwand-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_amd64.deb
    sha:06de7a77207e80c58d5607518a59752d6669317b
  • libmagickwand-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:73354835a65d96836e1e9b7e7f5519929619aab1
  • perlmagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els26_all.deb
    sha:d2a27171318bd8c5321a0bd184600d878277b5e2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.