[CLSA-2026:1785308685] ImageMagick: Fix of CVE-2026-61866
Type:
security
Severity:
Important
Release date:
2026-07-29 07:04:55 UTC
Description:
- CVE-2026-61866: free jpeg_image/jpeg_image_info on the JNG encoder's JPEG-alpha OpenBlob-failure path (WriteOneJNGImage in coders/png.c), backporting upstream 353e2604, to prevent a memory leak
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:48d43e6f04c317d615f4e79dcaa12fad29554842fe112b77242e4ecf912487c3
  • ImageMagick-c++-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:f7c782e9b92aecb861cf4635d8bed84ecf3e169e3abb6c62f13856b45662b102
  • ImageMagick-c++-devel-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:13d5ed43a58463de97de7a653adf82556e138922835e8700662d05d38e476acd
  • ImageMagick-devel-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:0801d572954fbc17e357d0af7f71aee1e54fa71d981371fa288161407edbfa5e
  • ImageMagick-djvu-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:797aa73a02651baaf4b40db6bc4ad9d569f1c399fdf547f079c402f9178139e3
  • ImageMagick-doc-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:95d8f631307502901c0a3df5f8fe18f65de16989456e8301213141507c1c7cbd
  • ImageMagick-libs-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:983664dc1cf5a544b90a3295c5f92a0158e9848947252f53ef75752ca3471c19
  • ImageMagick-perl-6.9.13.50-1.el8.tuxcare.els3.x86_64.rpm
    sha:17791369b7f3dd0e4c0e500211a7c9cee5eda3ee741e44a8939b3e1011385e31
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.