{"id":"CLSA-2026-1782139676","summary":"Fix CVE(s): CVE-2026-46559, CVE-2026-49218, CVE-2026-53460","details":"   * SECURITY UPDATE: Heap buffer over-write in the JP2 encoder via jp2:quality\n     and jp2:rate options\n     - debian/patches/CVE-2026-46559.patch: bound the jp2:quality and jp2:rate\n       parse loops by the tcp_distoratio/tcp_rates array extent in\n       WriteJP2Image() in coders/jp2.c\n     - CVE-2026-46559\n   * SECURITY UPDATE: Invalid image dimensions in the DCM decoder leading to\n     crashes in later operations\n     - debian/patches/CVE-2026-49218.patch: reject an image with zero rows or\n       columns at the end of ReadDCMImage() in coders/dcm.c\n     - CVE-2026-49218\n   * SECURITY UPDATE: Out-of-memory condition via missing maximum memory request\n     check in AcquireAlignedMemory\n     - debian/patches/CVE-2026-53460.patch: reject allocation sizes greater than\n       GetMaxMemoryRequest() in AcquireAlignedMemory() in magick/memory.c\n     - CVE-2026-53460","modified":"2026-10-26T09:32:05.436139134Z","published":"2026-06-22T14:48:15Z","upstream":["CVE-2026-46559","CVE-2026-49218","CVE-2026-53460"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1782139676.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46559"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49218"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53460"}],"affected":[{"package":{"name":"imagemagick","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/imagemagick?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"imagemagick-6-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/imagemagick-6-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"imagemagick-6-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/imagemagick-6-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"imagemagick-6.q16","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/imagemagick-6.q16?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"imagemagick-6.q16hdri","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/imagemagick-6.q16hdri?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"imagemagick-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/imagemagick-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"imagemagick-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/imagemagick-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libimage-magick-perl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libimage-magick-perl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libimage-magick-q16-perl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libimage-magick-q16-perl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libimage-magick-q16hdri-perl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libimage-magick-q16hdri-perl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagick++-6-headers","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagick++-6-headers?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagick++-6.q16-8","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16-8?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagick++-6.q16-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagick++-6.q16hdri-8","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16hdri-8?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagick++-6.q16hdri-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16hdri-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagick++-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagick++-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickcore-6-arch-config","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickcore-6-arch-config?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickcore-6-headers","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickcore-6-headers?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickcore-6.q16-6","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-6?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickcore-6.q16-6-extra","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-6-extra?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickcore-6.q16-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickcore-6.q16hdri-6","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-6?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickcore-6.q16hdri-6-extra","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-6-extra?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickcore-6.q16hdri-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickcore-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickcore-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickwand-6-headers","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickwand-6-headers?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickwand-6.q16-6","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-6?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickwand-6.q16-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickwand-6.q16hdri-6","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16hdri-6?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickwand-6.q16hdri-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16hdri-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"libmagickwand-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libmagickwand-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}},{"package":{"name":"perlmagick","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/perlmagick?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782139676.json"}}],"schema_version":"1.9.0"}