[CLSA-2026:1789650252] ImageMagick: Fix of CVE-2026-86420
Type:
security
Severity:
Important
Release date:
2026-09-17 13:04:28 UTC
Description:
- CVE-2026-86420: release the memory-resource budget in OpenPixelCache() (magick/cache.c) when the pixel allocation fails and the cache falls back to the source pixels, so repeated allocation failures cannot exhaust the process memory budget
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:42c4f27668c8b087dd2a03dc604f54cb56f3f69af6cfbc22302e2042a6b881b8
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:7adb04d6285bc2d3c628ebc0d7769443e56f73650f6c36eb07b57e1036f07298
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:a9d4fb0819fda8d6e2826670946ccf27fa3368e5367d4a1883815ba048c2c6c6
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:729114e746bc4a6e2e00abd3dc4a3ad99bdea701d94e4ee1b6e4c6187516ee04
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:5c28119a2d3fb25beeae28036e72ff8ceb24a1b6e23145e4180371ce617da868
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:40bd99e50335a0b868c300d5bc4e063a774d3ae8a46ac08a432beeb24f3b1d8b
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:94dfc442ce947bc64d03475eeb5fe374f09354d1a061d485a83d8525247cc966
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:940912bad004c3dfa151020cd319dbae4d8e928ac73638b48ad904b9acbd775f
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:38850775b578f3e8568fff37ab72e66adfd328b562fb74a14a4719b690532a5c
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:1c43c77de0e73b1197dcf1c6b096acfe69d2ac796d860b24a45ea5cbfec95d4d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.