[CLSA-2026:1790181260] ImageMagick: Fix of 3 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-09-23 16:34:34 UTC
Description:
- CVE-2026-93586: fix a use-after-free when ImagesToBlob() writes an image list to an in-memory blob - CVE-2026-93587: make the PCD and HALD readers honour the list-length resource limit when cloning scenes - CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot be grown
Updated packages:
  • ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els4.i686.rpm
    sha:e144895330914e0aa0495c23c7db9dd31cf5f43103ae5fcb1fa03c5d62dddf5c
  • ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm
    sha:91f709720476c5d37e5fd2c27133ec1aa33dd4f13ded97e6fe0b7455065f3285
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els4.i686.rpm
    sha:5e6b429eab2f1fb32969443745548025687def8837cfc56d61f9c64ae8bb049e
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm
    sha:87a3ff74205a277577d7322ffb88601190ddabd204934c323f167abc8e122e8a
  • ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm
    sha:6cf709b91df64a856dedb25fc10f8a8a961c0fb6c9b3d1f0c59e9d4c00841f53
  • ImageMagick-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm
    sha:8f9d27a1aaf30dcc80f8c242dc55c0f2251af42cfda75b923ec740e627619e5e
  • ImageMagick-doc-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm
    sha:0223a653a12e5fc5d76528043a7d29bcf30d3bcfd002e508b23bf051f21f51d7
  • ImageMagick-perl-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm
    sha:5994fcac2a19ef1638a788a25da43071e55bb133d329b9736e1a44a048a60641
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.