CLSA-2026-1783591738

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1783591738
Upstream
CVE (6)
Published
2026-07-09T10:09:27Z
Modified
2026-10-26T09:43:20Z
Summary
Fix of 12 CVEs
Details
  • SECURITY UPDATE: out-of-bounds read when writing an IPTC output file (single-byte over-read)
    • debian/patches/CVE-2026-42326.patch: tighten the IPTC tag-length bound check in GetIPTCStream() in coders/meta.c
    • CVE-2026-42326
  • SECURITY UPDATE: out-of-bounds over-read of 24 bytes during polynomial distortion
    • debian/patches/CVE-2026-45624.patch: validate the control-point argument count in GenerateCoefficients() in magick/distort.c
    • CVE-2026-45624
  • SECURITY UPDATE: out-of-bounds write in the MIFF encoder when using LZMA compression
    • debian/patches/CVE-2026-46521.patch: include LZMAMaxExtent in the buffer-length computation and fail on LZMA-encoder errors in WriteMIFFImage() in coders/miff.c
    • CVE-2026-46521
  • SECURITY UPDATE: stack overflow via a crafted MVG file (missing recursion-depth check)
    • debian/patches/CVE-2026-48734.patch: add a recursion-depth guard on nested MVG class expansion in RenderMVGContent() in magick/draw.c
    • CVE-2026-48734
  • SECURITY UPDATE: heap buffer over-write in the MAT decoder on 32-bit systems (missing return-value check)
    • debian/patches/CVE-2026-48994.patch: check the quantum-format setters' return values and bail out on failure in ReadMATImageV4() in coders/mat.c
    • CVE-2026-48994
  • SECURITY UPDATE: complete the CVE-2026-45664 MNG LOOP/ENDL loop-cap fix by releasing the chunk buffer before raising the resource-limit exception (heap memory leak on the loop-cap abort path)
    • debian/patches/CVE-2026-45664-1.patch: free chunk before both ThrowReaderException calls in ReadOneMNGImage() in coders/png.c
    • CVE-2026-45664
References

Affected packages

TuxCare:Debian:10
imagemagick

Package

Name
imagemagick
Purl
pkg:deb/tuxcare/imagemagick?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
imagemagick-6-common

Package

Name
imagemagick-6-common
Purl
pkg:deb/tuxcare/imagemagick-6-common?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
imagemagick-6-doc

Package

Name
imagemagick-6-doc
Purl
pkg:deb/tuxcare/imagemagick-6-doc?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
imagemagick-6.q16

Package

Name
imagemagick-6.q16
Purl
pkg:deb/tuxcare/imagemagick-6.q16?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
imagemagick-6.q16hdri

Package

Name
imagemagick-6.q16hdri
Purl
pkg:deb/tuxcare/imagemagick-6.q16hdri?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
imagemagick-common

Package

Name
imagemagick-common
Purl
pkg:deb/tuxcare/imagemagick-common?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
imagemagick-doc

Package

Name
imagemagick-doc
Purl
pkg:deb/tuxcare/imagemagick-doc?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libimage-magick-perl

Package

Name
libimage-magick-perl
Purl
pkg:deb/tuxcare/libimage-magick-perl?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libimage-magick-q16-perl

Package

Name
libimage-magick-q16-perl
Purl
pkg:deb/tuxcare/libimage-magick-q16-perl?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libimage-magick-q16hdri-perl

Package

Name
libimage-magick-q16hdri-perl
Purl
pkg:deb/tuxcare/libimage-magick-q16hdri-perl?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagick++-6-headers

Package

Name
libmagick++-6-headers
Purl
pkg:deb/tuxcare/libmagick++-6-headers?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagick++-6.q16-8

Package

Name
libmagick++-6.q16-8
Purl
pkg:deb/tuxcare/libmagick++-6.q16-8?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagick++-6.q16-dev

Package

Name
libmagick++-6.q16-dev
Purl
pkg:deb/tuxcare/libmagick++-6.q16-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagick++-6.q16hdri-8

Package

Name
libmagick++-6.q16hdri-8
Purl
pkg:deb/tuxcare/libmagick++-6.q16hdri-8?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagick++-6.q16hdri-dev

Package

Name
libmagick++-6.q16hdri-dev
Purl
pkg:deb/tuxcare/libmagick++-6.q16hdri-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagick++-dev

Package

Name
libmagick++-dev
Purl
pkg:deb/tuxcare/libmagick++-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickcore-6-arch-config

Package

Name
libmagickcore-6-arch-config
Purl
pkg:deb/tuxcare/libmagickcore-6-arch-config?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickcore-6-headers

Package

Name
libmagickcore-6-headers
Purl
pkg:deb/tuxcare/libmagickcore-6-headers?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickcore-6.q16-6

Package

Name
libmagickcore-6.q16-6
Purl
pkg:deb/tuxcare/libmagickcore-6.q16-6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickcore-6.q16-6-extra

Package

Name
libmagickcore-6.q16-6-extra
Purl
pkg:deb/tuxcare/libmagickcore-6.q16-6-extra?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickcore-6.q16-dev

Package

Name
libmagickcore-6.q16-dev
Purl
pkg:deb/tuxcare/libmagickcore-6.q16-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickcore-6.q16hdri-6

Package

Name
libmagickcore-6.q16hdri-6
Purl
pkg:deb/tuxcare/libmagickcore-6.q16hdri-6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickcore-6.q16hdri-6-extra

Package

Name
libmagickcore-6.q16hdri-6-extra
Purl
pkg:deb/tuxcare/libmagickcore-6.q16hdri-6-extra?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickcore-6.q16hdri-dev

Package

Name
libmagickcore-6.q16hdri-dev
Purl
pkg:deb/tuxcare/libmagickcore-6.q16hdri-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickcore-dev

Package

Name
libmagickcore-dev
Purl
pkg:deb/tuxcare/libmagickcore-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickwand-6-headers

Package

Name
libmagickwand-6-headers
Purl
pkg:deb/tuxcare/libmagickwand-6-headers?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickwand-6.q16-6

Package

Name
libmagickwand-6.q16-6
Purl
pkg:deb/tuxcare/libmagickwand-6.q16-6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickwand-6.q16-dev

Package

Name
libmagickwand-6.q16-dev
Purl
pkg:deb/tuxcare/libmagickwand-6.q16-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickwand-6.q16hdri-6

Package

Name
libmagickwand-6.q16hdri-6
Purl
pkg:deb/tuxcare/libmagickwand-6.q16hdri-6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickwand-6.q16hdri-dev

Package

Name
libmagickwand-6.q16hdri-dev
Purl
pkg:deb/tuxcare/libmagickwand-6.q16hdri-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
libmagickwand-dev

Package

Name
libmagickwand-dev
Purl
pkg:deb/tuxcare/libmagickwand-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"
perlmagick

Package

Name
perlmagick
Purl
pkg:deb/tuxcare/perlmagick?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783591738.json"