[CLSA-2026:1786007573] Fix CVE(s): CVE-2025-66628, CVE-2026-24485, CVE-2026-25989
Type:
security
Severity:
Important
Release date:
2026-08-06 09:13:19 UTC
Description:
* SECURITY UPDATE: integer overflow in the TIM image reader - debian/patches/CVE-2025-66628.patch: guard the image_size computation with HeapOverflowSanityCheckGetSize() and reject files claiming more data than the blob holds in ReadTIMImage() in coders/tim.c - CVE-2025-66628 * SECURITY UPDATE: infinite loop in the PCD decoder on a missing Sync marker - debian/patches/CVE-2026-24485.patch: track the ReadBlob return in byte_count and bail out on a short read in the PCDGetBits macro, and guard the sync-search and delta-recovery loops with EOFBlob() so a truncated PCD terminates with a corrupt-image warning instead of looping, in DecodeImage() in coders/pcd.c - CVE-2026-24485 * SECURITY UPDATE: off-by-one boundary check in the double-to-integer cast helper - debian/patches/CVE-2026-25989.patch: tighten the MAGICK_SSIZE_MAX guard from > to >= in CastDoubleToLong() in magick/image-private.h - CVE-2026-25989
CVEs fixed:
Updated packages:
  • imagemagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:4060af6f4bf78551dce42d6ea3da869a654649c1
  • imagemagick-6-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:a9c71912fdb55cab98aca09cc584478fb8290f6d
  • imagemagick-6-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:50ae7dd6b7993bad66cdcb486b97d9c28f5fc1eb
  • imagemagick-6.q16_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:ddf45f055e19e93ddc4e5f79fbcce92801ad151b
  • imagemagick-6.q16hdri_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:3b60e8062db8ee21b91764d81b2afda93985033b
  • imagemagick-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:0fe9022108b0f2749e3411ba59a4783cedb6bb70
  • imagemagick-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:faf7c8520505956dcac5d7955a2b75ad75574330
  • libimage-magick-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:a4701bb85752d491a51f2201fbd9a9f317df3aa3
  • libimage-magick-q16-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:39e14784e1834f29e744c8887c3cbc0dc8ecfdd9
  • libimage-magick-q16hdri-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:6c16b5776c2241f815c3f7173e73e2bb4f1a22d0
  • libmagick++-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:6c90cdf55a8d7dbb770aa5ad83f885c4f70be246
  • libmagick++-6.q16-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:0263a6ce77b15c4d60e71e2b3d7951e158b1c9b0
  • libmagick++-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:d6c1e9c58e16010e9646579b2b61b39fdb04ec93
  • libmagick++-6.q16hdri-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:ddcda77a7f59fc2e6abfe7286da3b2ccc374eca1
  • libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:e768ac61f78c1cdf1deabc7712b1ea064a926178
  • libmagick++-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:c31ac40653ecd3af9fb8cc32aef1baf3dcb2f447
  • libmagickcore-6-arch-config_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:1401dc2e0c3389834f7ed7d3a5b5e34d9bee6c2c
  • libmagickcore-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:8138d752532c7d1884cc66e71f960ac47912f8d2
  • libmagickcore-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:64c362a7524744ff23148e8e1093fd1929424052
  • libmagickcore-6.q16-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:6d99b0d4ddb5235b1d985787ff636dffdd341240
  • libmagickcore-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:567c656dd3c01d02e19763da8e527f16e043ddeb
  • libmagickcore-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:ddae6d0caa5e8c408628bcc1b43a8b79134ef0ca
  • libmagickcore-6.q16hdri-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:600a36c1e45c76907dbcd37b6a69969fc234af0b
  • libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:eab8e762b27436ad96db67fbd1760e6557966abf
  • libmagickcore-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:5bbf26cd4c49b6ea26eb81a80cede6f3f15c3bad
  • libmagickwand-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:22c6c466fd7d3716f1b923a425f89a0537973c01
  • libmagickwand-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:1b809d29362dee2114b60eafa26a5cb36e359640
  • libmagickwand-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:3a353f97bcdf05126f4d1d3a4319c26fe58d1b18
  • libmagickwand-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:5dfaddc08301dab4b68d01de0d3b3b4820180936
  • libmagickwand-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_amd64.deb
    sha:acf3821ac671a8890b70f27cc3a25ea48d2b57e9
  • libmagickwand-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:748257baf7558f2d6a70f29010588701eb946a34
  • perlmagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els48_all.deb
    sha:91d4597a1b09adfa7478b2c96245686a83fdb85f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.