CLSA-2026-1782720378

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1782720378
Upstream
CVE (4)
Published
2026-06-29T08:06:37Z
Modified
2026-10-26T09:31:46Z
Summary
Fix CVE(s): CVE-2026-46559, CVE-2026-46692, CVE-2026-46693, CVE-2026-47166
Details
  • SECURITY UPDATE: heap over-write, file-descriptor hijack race, and heap over-read in the distributed pixel cache server
    • debian/patches/CVE-2026-46692-46693-47166.patch: bound the requested region against the pixel cache extent before reading or writing pixels and indexes, and hand each connection a private heap-allocated socket to a detached handler thread in magick/distribute-cache.c
    • CVE-2026-46692
    • CVE-2026-46693
    • CVE-2026-47166
  • SECURITY UPDATE: heap buffer over-write of a single byte in the JP2 encoder via crafted jp2:quality / jp2:rate options
    • debian/patches/CVE-2026-46559.patch: bound the jp2:quality and jp2:rate parse loops by the tcp_distoratio/tcp_rates array extent in WriteJP2Image() in coders/jp2.c (defense-in-depth; the JP2 coder is not compiled in this build)
    • CVE-2026-46559
References

Affected packages

TuxCare:Ubuntu:16.04
imagemagick

Package

Name
imagemagick
Purl
pkg:deb/tuxcare/imagemagick?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
imagemagick-6.q16

Package

Name
imagemagick-6.q16
Purl
pkg:deb/tuxcare/imagemagick-6.q16?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
imagemagick-common

Package

Name
imagemagick-common
Purl
pkg:deb/tuxcare/imagemagick-common?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
imagemagick-doc

Package

Name
imagemagick-doc
Purl
pkg:deb/tuxcare/imagemagick-doc?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libimage-magick-perl

Package

Name
libimage-magick-perl
Purl
pkg:deb/tuxcare/libimage-magick-perl?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libimage-magick-q16-perl

Package

Name
libimage-magick-q16-perl
Purl
pkg:deb/tuxcare/libimage-magick-q16-perl?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagick++-6-headers

Package

Name
libmagick++-6-headers
Purl
pkg:deb/tuxcare/libmagick++-6-headers?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagick++-6.q16-5v5

Package

Name
libmagick++-6.q16-5v5
Purl
pkg:deb/tuxcare/libmagick++-6.q16-5v5?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagick++-6.q16-dev

Package

Name
libmagick++-6.q16-dev
Purl
pkg:deb/tuxcare/libmagick++-6.q16-dev?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagick++-dev

Package

Name
libmagick++-dev
Purl
pkg:deb/tuxcare/libmagick++-dev?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickcore-6-arch-config

Package

Name
libmagickcore-6-arch-config
Purl
pkg:deb/tuxcare/libmagickcore-6-arch-config?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickcore-6-headers

Package

Name
libmagickcore-6-headers
Purl
pkg:deb/tuxcare/libmagickcore-6-headers?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickcore-6.q16-2

Package

Name
libmagickcore-6.q16-2
Purl
pkg:deb/tuxcare/libmagickcore-6.q16-2?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickcore-6.q16-2-extra

Package

Name
libmagickcore-6.q16-2-extra
Purl
pkg:deb/tuxcare/libmagickcore-6.q16-2-extra?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickcore-6.q16-dev

Package

Name
libmagickcore-6.q16-dev
Purl
pkg:deb/tuxcare/libmagickcore-6.q16-dev?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickcore-dev

Package

Name
libmagickcore-dev
Purl
pkg:deb/tuxcare/libmagickcore-dev?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickwand-6-headers

Package

Name
libmagickwand-6-headers
Purl
pkg:deb/tuxcare/libmagickwand-6-headers?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickwand-6.q16-2

Package

Name
libmagickwand-6.q16-2
Purl
pkg:deb/tuxcare/libmagickwand-6.q16-2?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickwand-6.q16-dev

Package

Name
libmagickwand-6.q16-dev
Purl
pkg:deb/tuxcare/libmagickwand-6.q16-dev?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
libmagickwand-dev

Package

Name
libmagickwand-dev
Purl
pkg:deb/tuxcare/libmagickwand-dev?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"
perlmagick

Package

Name
perlmagick
Purl
pkg:deb/tuxcare/perlmagick?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.8.9.9-7ubuntu5.17+tuxcare.els49

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1782720378.json"