[CLSA-2026:1793951473] Fix of 7 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-06 07:51:29 UTC
Description:
* SECURITY UPDATE: security policy bypass via -concatenate - debian/patches/CVE-2026-55628.patch: check the path policy for the output and every input file and stop on a denied path in ConcatenateImages() in wand/convert.c - CVE-2026-55628 * SECURITY UPDATE: path policy bypass via dangling or looping symlinks - debian/patches/CVE-2026-105081.patch: deny a path policy match whose pattern is a symlink that realpath() cannot resolve in IsRightsAuthorized() in magick/policy.c, add is_symlink_utf8() to magick/utility-private.h - CVE-2026-105081 * SECURITY UPDATE: infinite loop at the end of a bzip2-compressed blob - debian/patches/CVE-2026-106565.patch: mark the blob as at EOF on a short bzip2 read in EOFBlob() and ReadBlob() in magick/blob.c - CVE-2026-106565 * SECURITY UPDATE: symlink target overwritten when MAGICK_SHRED_PASSES enables shredding - debian/patches/CVE-2026-106566.patch: honour MAGICK_SHRED_PASSES when deciding whether to use a symbolic link in AcquireUniqueSymbolicLink() in magick/utility.c - CVE-2026-106566 * SECURITY UPDATE: infinite loop in PSD resource block parsing on 32-bit systems - debian/patches/CVE-2026-106567.patch: reject negative and out-of-range resource block offsets in ParseImageResourceBlocks() in coders/psd.c - CVE-2026-106567 * SECURITY UPDATE: integer overflow in pixel cache nexus size computation - debian/patches/CVE-2026-106571.patch: check the region size multiplications for overflow in SetPixelCacheNexusPixels() in magick/cache.c - CVE-2026-106571
CVEs fixed:
Updated packages:
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:3cadbd038c18998f830952b4fda0dabd53ccbc15
  • imagemagick-6-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:fd64af521d3e5a9f8d4fbc4e93539df894296169
  • imagemagick-6-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:1f89d382608f20a466f0774a0ebf4200a33932bd
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:cb1a60146a5aed6701a216c05842f89e7674ea66
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:8073dafa7f139afa347545fe86920cf28a513105
  • imagemagick-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:7db4fe60c580a7837bcbf6521cdc6880f0b33448
  • imagemagick-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:a103bf2a864dbc2dc1fcd03fe438ac6d84d30f0e
  • libimage-magick-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:b683328cacaade4eb4e4760f0bcd211518a6f428
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:0891a3a9a63eb70628db0d2b1c1e931b54068584
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:815126026bd613c91c43d8edb245de8a4a53ae16
  • libmagick++-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:c74fd9a01139275fd2ec648fba091ca2bc15dc3d
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:8d893b986a9a301902a94c7a48aca6cc36941eb7
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:684d70b505a3992c2f91cd878e3b8e4768fa194c
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:dea4c1b02ee58cb1970012b96b92f56a4ff84189
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:4830c8dff34c75d55531a7411520cb568ebd0b17
  • libmagick++-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:565d3a66d514a1f9f9a54b3416e3a5794f85517c
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:f6b2adaa5189982c2fba380364f19ef36470b6d8
  • libmagickcore-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:fe06fd79e91e79487f980139819b2ef502063a5c
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:8d0c2d10009fad6ac700acb4072cc29be2ea4b15
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:b5203980d06209c8899f975ab5fb9602ab0bd7ed
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:505d1e1f3ebafa1e39cc9d686c9117c20e4342d8
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:15c0e5753f434440ec4145c373073bcb37d71339
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:5c7fb1c9265cb59bd826fa56567dbf3fc7d0bced
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:2b44614461e5cf42289ca49cd29f61719ffcd022
  • libmagickcore-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:4880d8bda5e8346aae6fbe9678bd937a378a871c
  • libmagickwand-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:2357ab575ad70e7fb7cca4f651f861308167dc79
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:ae2c1fd95f7dd69ed13646da2599ec401fd83dd1
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:f76a8174369b8976e90dc19b9b881b182e7a27d7
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:301d539949d44b165930ee55bad783338953b962
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_amd64.deb
    sha:740d1dd0a69e45bce8aacedd61de94e9ac3c7806
  • libmagickwand-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:07998ea5497ab7ee273a844c55ad94eef19c86bc
  • perlmagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_all.deb
    sha:98409b8fca91281174634a8e425caca33cca0c36
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:7b0d0e3caea85827d51a010a3eba085cc4f0c3f3
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:6940d3c3203a638c23f4f3b1965b5c7675a8cb5c
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:8515ed2f6e5d61b4b6f6f84721714631869bd3cf
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:02abbaa52e3065a8bd21c3457a665f6cdecefbf0
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:b9cd3ea80824533bf0ab00d5a0ac0a7fbf222eaa
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:fecea4f8248dd8d8842891b8cf9152abff2c7a6c
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:3400bc569b470375b183c1fafe75f37fce60efa7
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:b6e4ecd724a4d8e56a2e2bb86e8ea7f9658a08f2
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:46a667879805c7b34ff05af20a3a331f88235f83
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:5939c8674d7366d081d3db331089c7095a321101
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:5760b990bd73b43a065adaf04de2236ed381894e
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:660b0ac4f1754913506805b2978988cf63b131fa
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:950225b0873a0dde4cca08508a51658f62e3e9d7
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:02880a8f6bb8665c647d77f28d5401d36bb150e3
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:25aab82022c98c5f87c70fc7967d5e0f638b8aa3
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:4ca66f26e8066fa41a6a67f03080d5bdbce52b92
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:cda480b2dbf908a96ca10a83943787bd38e77fa4
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:53af9653f1b7f3d94cdbffda23d98238f3c96909
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:18d607a0dff7f0d737f7ea5b7ae9cedab296c923
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_arm64.deb
    sha:a42b7807e36867b9fe25c03cd5b515bbfdcbfb0a
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:d763f0531094decd52a6d8ce440debeb41cb6db1
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:fb03ac09607cf97628c745e7d2ffebb701c2ab91
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:7f892a779298f9b6b88f9319bcc106bba3706de2
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:9e2256a6177c3eeee0b3bba9edce07257dd37f5d
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:f31610863abf42a623776e03ec5323acac5597fb
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:a258ba76151ebc77f6fbefb7f5600217614365a2
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:6e4679a59951e6c020a4286f9566d66b67feed56
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:c751e92fbc4deaf9d7b0d81688b88db48c3fbcfd
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:8e2645928882cb3ed2108d2529ffe1c5116900f2
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:1f972b8629d989d07900c13e297d924bb36fac82
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:f0de9ef00e01d4c8422308780108eca39963fae1
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:57a209136bd0c8a498f543cc6b01c8e3413a6afc
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:44d2fe895bb45c858466145bb4f7528955757ba1
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:cd71102ca1d82a1a8e58f6f79e9f10476016b690
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:3e68d93259c3437aafcf746d2f2f0ffcf852de3e
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:192f612fa8c280bbc4563c7be4f91f7fb0c1e778
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:d1afaf597e3deb9e64f17a11a2eb42af7d4dad27
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:f5e362eadaa41319606a14b8b98e40dabae3bacd
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:63180073ff49ff275592dd28256b66d3eeeba90c
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els25_armel.deb
    sha:e89a0d367f6ac2a44ace9c485081b497625beeda
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.