CLSA-2026-1791975274

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791975274
Upstream
CVE (5)
Published
2026-10-14T10:54:47Z
Modified
2026-10-26T09:32:04Z
Summary
Fix of 5 CVEs
Details
  • SECURITY UPDATE: infinite loop in the XML parser via parameter entities
    • debian/patches/CVE-2026-106568.patch: also check parameter entity ('%') references for circular declarations in ValidateEntities() and ParseInternalDoctype() in magick/xml-tree.c
    • CVE-2026-106568
  • SECURITY UPDATE: uninitialized memory read in the TGA decoder
    • debian/patches/CVE-2026-109259.patch: zero-initialize the TGA header in ReadTGAImage() in coders/tga.c
    • CVE-2026-109259
  • SECURITY UPDATE: memory leak in the YUV encoder
    • debian/patches/CVE-2026-109263.patch: release the resized image when the chroma resize fails, and the chroma image when the scene loop exits early, in WriteYUVImage() in coders/yuv.c
    • CVE-2026-109263
  • SECURITY UPDATE: PostScript code injection through font names
    • debian/patches/CVE-2026-109275.patch: only pass font names made of alphanumerics, '-', '_' and '.' to the PostScript renderer, otherwise fall back to Times-Roman, in RenderPostscript() in magick/annotate.c
    • CVE-2026-109275
  • SECURITY UPDATE: memory leak in wavelet denoise
    • debian/patches/CVE-2026-109278.patch: release the output image on the resource and memory allocation failure paths in WaveletDenoiseImage() in magick/fx.c
    • CVE-2026-109278
References

Affected packages

TuxCare:Ubuntu:18.04
imagemagick

Package

Name
imagemagick
Purl
pkg:deb/tuxcare/imagemagick?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
imagemagick-6-common

Package

Name
imagemagick-6-common
Purl
pkg:deb/tuxcare/imagemagick-6-common?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
imagemagick-6-doc

Package

Name
imagemagick-6-doc
Purl
pkg:deb/tuxcare/imagemagick-6-doc?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
imagemagick-6.q16

Package

Name
imagemagick-6.q16
Purl
pkg:deb/tuxcare/imagemagick-6.q16?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
imagemagick-6.q16hdri

Package

Name
imagemagick-6.q16hdri
Purl
pkg:deb/tuxcare/imagemagick-6.q16hdri?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
imagemagick-common

Package

Name
imagemagick-common
Purl
pkg:deb/tuxcare/imagemagick-common?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
imagemagick-doc

Package

Name
imagemagick-doc
Purl
pkg:deb/tuxcare/imagemagick-doc?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libimage-magick-perl

Package

Name
libimage-magick-perl
Purl
pkg:deb/tuxcare/libimage-magick-perl?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libimage-magick-q16-perl

Package

Name
libimage-magick-q16-perl
Purl
pkg:deb/tuxcare/libimage-magick-q16-perl?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libimage-magick-q16hdri-perl

Package

Name
libimage-magick-q16hdri-perl
Purl
pkg:deb/tuxcare/libimage-magick-q16hdri-perl?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagick++-6-headers

Package

Name
libmagick++-6-headers
Purl
pkg:deb/tuxcare/libmagick++-6-headers?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagick++-6.q16-7

Package

Name
libmagick++-6.q16-7
Purl
pkg:deb/tuxcare/libmagick++-6.q16-7?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagick++-6.q16-dev

Package

Name
libmagick++-6.q16-dev
Purl
pkg:deb/tuxcare/libmagick++-6.q16-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagick++-6.q16hdri-7

Package

Name
libmagick++-6.q16hdri-7
Purl
pkg:deb/tuxcare/libmagick++-6.q16hdri-7?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagick++-6.q16hdri-dev

Package

Name
libmagick++-6.q16hdri-dev
Purl
pkg:deb/tuxcare/libmagick++-6.q16hdri-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagick++-dev

Package

Name
libmagick++-dev
Purl
pkg:deb/tuxcare/libmagick++-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickcore-6-arch-config

Package

Name
libmagickcore-6-arch-config
Purl
pkg:deb/tuxcare/libmagickcore-6-arch-config?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickcore-6-headers

Package

Name
libmagickcore-6-headers
Purl
pkg:deb/tuxcare/libmagickcore-6-headers?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickcore-6.q16-3

Package

Name
libmagickcore-6.q16-3
Purl
pkg:deb/tuxcare/libmagickcore-6.q16-3?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickcore-6.q16-3-extra

Package

Name
libmagickcore-6.q16-3-extra
Purl
pkg:deb/tuxcare/libmagickcore-6.q16-3-extra?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickcore-6.q16-dev

Package

Name
libmagickcore-6.q16-dev
Purl
pkg:deb/tuxcare/libmagickcore-6.q16-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickcore-6.q16hdri-3

Package

Name
libmagickcore-6.q16hdri-3
Purl
pkg:deb/tuxcare/libmagickcore-6.q16hdri-3?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickcore-6.q16hdri-3-extra

Package

Name
libmagickcore-6.q16hdri-3-extra
Purl
pkg:deb/tuxcare/libmagickcore-6.q16hdri-3-extra?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickcore-6.q16hdri-dev

Package

Name
libmagickcore-6.q16hdri-dev
Purl
pkg:deb/tuxcare/libmagickcore-6.q16hdri-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickcore-dev

Package

Name
libmagickcore-dev
Purl
pkg:deb/tuxcare/libmagickcore-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickwand-6-headers

Package

Name
libmagickwand-6-headers
Purl
pkg:deb/tuxcare/libmagickwand-6-headers?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickwand-6.q16-3

Package

Name
libmagickwand-6.q16-3
Purl
pkg:deb/tuxcare/libmagickwand-6.q16-3?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickwand-6.q16-dev

Package

Name
libmagickwand-6.q16-dev
Purl
pkg:deb/tuxcare/libmagickwand-6.q16-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickwand-6.q16hdri-3

Package

Name
libmagickwand-6.q16hdri-3
Purl
pkg:deb/tuxcare/libmagickwand-6.q16hdri-3?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickwand-6.q16hdri-dev

Package

Name
libmagickwand-6.q16hdri-dev
Purl
pkg:deb/tuxcare/libmagickwand-6.q16hdri-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
libmagickwand-dev

Package

Name
libmagickwand-dev
Purl
pkg:deb/tuxcare/libmagickwand-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"
perlmagick

Package

Name
perlmagick
Purl
pkg:deb/tuxcare/perlmagick?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"