[CLSA-2026:1785334393] ImageMagick: Fix of CVE-2026-61866
Type:
security
Severity:
Important
Release date:
2026-07-29 14:13:25 UTC
Description:
- CVE-2026-61866: free jpeg_image/jpeg_image_info on the JNG encoder's JPEG-alpha OpenBlob-failure path (WriteOneJNGImage in coders/png.c), backporting upstream 353e2604, to prevent a memory leak
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.13.50-1.el8_4.tuxcare.els3.x86_64.rpm
    sha:e736d7ccbc403b96ab0361924d9a74a1ba07a579bc79041f3139b4e17d8f04b8
  • ImageMagick-c++-6.9.13.50-1.el8_4.tuxcare.els3.x86_64.rpm
    sha:5ed1c21ac9bfe84f484e17a996d813d66567c3637edb7694a7679c7b344771e4
  • ImageMagick-c++-devel-6.9.13.50-1.el8_4.tuxcare.els3.x86_64.rpm
    sha:841fa97572db80ea4c814ebd5e673232eec1814381cef144f8a72bb5239beae2
  • ImageMagick-devel-6.9.13.50-1.el8_4.tuxcare.els3.x86_64.rpm
    sha:db5645a5961026e7c62aaec14b953f8f039d7ce814cf29d3e6ebd710728d036c
  • ImageMagick-djvu-6.9.13.50-1.el8_4.tuxcare.els3.x86_64.rpm
    sha:854ba03fd0df9966d70bbd2bd0f06c6e767a74d878814a9c204ee9bd382a4cbe
  • ImageMagick-doc-6.9.13.50-1.el8_4.tuxcare.els3.x86_64.rpm
    sha:fd4c18da21b14741f6d9f70d727afc2015c70f3b20dc036b33ce7e5f81f75273
  • ImageMagick-libs-6.9.13.50-1.el8_4.tuxcare.els3.x86_64.rpm
    sha:30fe69665daa33e76dc057d070970091499b2493faf9023b60e719815907a0d8
  • ImageMagick-perl-6.9.13.50-1.el8_4.tuxcare.els3.x86_64.rpm
    sha:a2922e7d5f88d2b0f2d2cf478a97bd4d735a3bdafd13934f049364671669e858
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.