[CLSA-2026:1774010101] Fix CVE(s): CVE-2026-25898, CVE-2026-25971, CVE-2026-25983
Type:
security
Severity:
Critical
Release date:
2026-03-20 12:35:05 UTC
Description:
* SECURITY UPDATE: out-of-bound read with negative pixel index in UIL and XPM encoders - debian/patches/CVE-2026-25898.patch: add bounds check on pixel index value returned by GetPixelIndex before using as array subscript - CVE-2026-25898 * SECURITY UPDATE: heap use-after-free in MSL repage and roll handlers - debian/patches/CVE-2026-25983.patch: move null check before accessing image properties in repage and roll element handlers - CVE-2026-25983 * SECURITY UPDATE: stack overflow via infinite recursion in MSL write handler - debian/patches/CVE-2026-25971.patch: check output format before calling WriteImage to prevent recursive MSL processing - CVE-2026-25971
Updated packages:
  • imagemagick_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:be35d3789fc6279a788d90d063688c9507020c0b
  • imagemagick-6-common_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:a8b219c3f4f6f0bccaa56fc0871d0e253a01af8d
  • imagemagick-6-doc_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:bc1701c3e84348487533f1d8cb58c19f059c76ed
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:2f3807e1ee58e4db9661a0e537960ba52e904631
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:66810f4817ee7b46bc2caf6cbd0ab988162af37e
  • imagemagick-common_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:509a98280da0faf6790647438120ae46f785d05e
  • imagemagick-doc_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:f1046a7da4496d2430fa7e8150f3846f034c2c18
  • libimage-magick-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:589f8bc8a1e1e22433363d762cc804d59c9d7187
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:eb428a809511cd8cd029e7ee4599228b4061cedb
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:8d18934c70b012dda26d273a2fb0f1d324d8daad
  • libmagick++-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:b2bf7dbb75e2bd58e993fc32b98849da0fa3d6e2
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:01b4dca6fd24470d5f0bf2951f65b801a8306521
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:29273e8131c18868d9dc43287f398537ef26deeb
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:b4ba0885516fe036579486f8d7133e80b949a47a
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:e07104a481dfe7a5d8dedf0c226e2d85b483f2e2
  • libmagick++-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:073e7e9f90530f498a0c1fee9c418710b58de3b0
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:625adcb3a262f918cd0fce02539a86c7b3f9beeb
  • libmagickcore-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:db802c34f3f5d726ce860b8953c1c2ba90d969e6
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:2e8df42cf7fb526efa9d749a11e9c7706949e7c3
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:9136efc415aa333022e306deca16064e6fa14057
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:0018fad8107245b2b248c62fc00aee449ffd2888
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:c9b8c796dbdad00c81f5834f1fa1c3c1e2a5489a
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:de6e3eb14ea2e30bc841a3173d8e785f7700a222
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:78c6809da9c8c285fd6d2664be630bdcf86aafd4
  • libmagickcore-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:ed73a8e6ee5a127277c493b5b8901e220dcbb368
  • libmagickwand-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:40796ba55830fcfe0683a8ca693d94fe620032e0
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:eb1a443c435ae6125dbefcc19baec8f222ab4e9e
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:95f3d999d56ed2ba0a66adfe43c6066339f435a6
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:0eb895aea55177dc89ee02cd0369f4f7e7e17d6a
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_amd64.deb
    sha:f67a5bb77fc406bd150c0675561f84d68289b7a2
  • libmagickwand-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:459cb1f1af468b4cb55ed0947abfbda7bbb679c0
  • perlmagick_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els18_all.deb
    sha:b27b7acec3a1253e4082df55b0c9732f0d4893c0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.