[CLSA-2026:1785334645] ImageMagick: Fix of CVE-2026-61866
Type:
security
Severity:
Important
Release date:
2026-07-29 14:17:37 UTC
Description:
- CVE-2026-61866: free jpeg_image/jpeg_image_info on the JNG encoder's JPEG-alpha OpenBlob-failure path (WriteOneJNGImage in coders/png.c), backporting upstream 353e2604, to prevent a memory leak
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:429625dd1ab7554f0730d34b7a974fb1fb41f50128555acde33a3d438b60824c
  • ImageMagick-c++-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:99c99dc03a429d0ff5cc4da8cf36be0fb421e4b21533a6c402d48fb539c022f0
  • ImageMagick-c++-devel-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:35aceddf4c5857f883f040b981373c91e3f86f0b81483cf43389b409a9a6ab8d
  • ImageMagick-devel-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:0c62ad5d940ca0d25e03302f35b50ffcfade106f5ba9a26b978aad24ea006f83
  • ImageMagick-djvu-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:5f8b846f0edeaa2f2f6b67e59033a326ef1aa4afe2ed74945082fbe634da4158
  • ImageMagick-doc-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:25374bd0b82aba734598c4dec27d4877d731e12e3c05faa0fdc7ebb4f07719c6
  • ImageMagick-libs-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:8100c4d1009b380c343f00e93bb2b0f25865e86590d7e9b15091c61755c7e7b1
  • ImageMagick-perl-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:867599a736f597690d3f21191fee24837f591bde23788e1427b6f4f5d0e23764
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.