{"id":"CLSA-2026-1784275402","summary":"Fix of 5 CVEs","details":"   * SECURITY UPDATE: off-by-one out-of-bounds read in morphology kernel validation\n     - debian/patches/CVE-2026-56361.patch: reject a User Defined kernel origin\n       equal to the kernel width/height in magick/morphology.c\n     - CVE-2026-56361\n   * SECURITY UPDATE: integer overflow leading to heap out-of-bounds read in the PSD/PSB RLE decoder\n     - debian/patches/CVE-2026-56367.patch: guard the image-\u003erows*psd_info-\u003echannels\n       allocation size against integer overflow in ReadPSDMergedImage() in coders/psd.c\n     - CVE-2026-56367\n   * SECURITY UPDATE: memory leak in coders that write raw pixel data\n     - debian/patches/CVE-2026-56368.patch: free quantum_info on the OpenBlob\n       failure paths in coders/bgr.c, cmyk.c, rgb.c and ycbcr.c\n     - CVE-2026-56368\n   * SECURITY UPDATE: out-of-bounds access in ConnectedComponentsImage()\n     - debian/patches/CVE-2026-56370.patch: validate the CLI connected-components:keep\n       / :remove indices before indexing object[]/colormap[] in magick/vision.c\n     - CVE-2026-56370\n   * SECURITY UPDATE: heap out-of-bounds read/write in the PCD decoder\n     - debian/patches/CVE-2026-56378.patch: bound the write pointer against a\n       per-plane sentinel in DecodeImage() in coders/pcd.c\n     - CVE-2026-56378","modified":"2026-10-26T09:31:47.210178527Z","published":"2026-07-17T08:03:54Z","upstream":["CVE-2026-56361","CVE-2026-56367","CVE-2026-56368","CVE-2026-56370","CVE-2026-56378"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1784275402.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56361"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56367"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56368"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56370"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56378"}],"affected":[{"package":{"name":"imagemagick","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"imagemagick-6-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-6-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"imagemagick-6-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-6-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"imagemagick-6.q16","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-6.q16?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"imagemagick-6.q16hdri","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-6.q16hdri?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"imagemagick-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"imagemagick-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libimage-magick-perl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libimage-magick-perl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libimage-magick-q16-perl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libimage-magick-q16-perl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libimage-magick-q16hdri-perl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libimage-magick-q16hdri-perl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagick++-6-headers","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6-headers?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagick++-6.q16-7","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16-7?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagick++-6.q16-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagick++-6.q16hdri-7","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16hdri-7?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagick++-6.q16hdri-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16hdri-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagick++-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickcore-6-arch-config","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6-arch-config?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickcore-6-headers","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6-headers?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickcore-6.q16-3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickcore-6.q16-3-extra","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-3-extra?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickcore-6.q16-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickcore-6.q16hdri-3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickcore-6.q16hdri-3-extra","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-3-extra?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickcore-6.q16hdri-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickcore-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickwand-6-headers","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6-headers?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickwand-6.q16-3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickwand-6.q16-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickwand-6.q16hdri-3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16hdri-3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickwand-6.q16hdri-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16hdri-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"libmagickwand-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}},{"package":{"name":"perlmagick","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/perlmagick?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els42"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784275402.json"}}],"schema_version":"1.9.0"}