{"id":"CLSA-2026-1790182513","summary":"ImageMagick: Fix of 98 CVEs","details":"- CVE-2026-93586: fix a use-after-free when ImagesToBlob() writes an image\n  list to an in-memory blob\n- CVE-2026-93587: make the PCD and HALD readers honour the list-length\n  resource limit when cloning scenes\n- CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot\n  be grown","modified":"2026-10-26T09:30:49.020796710Z","published":"2026-10-09T10:36:35Z","upstream":["CVE-2026-93586","CVE-2026-93587","CVE-2026-93588"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790182513.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53014"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53019"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53101"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55154"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55160"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55212"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-57803"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62171"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-65955"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23876"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23952"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24481"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24484"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25576"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25638"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25795"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25796"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25797"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25798"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25799"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25966"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25970"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25982"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25983"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25987"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25988"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26066"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26283"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26284"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26983"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27798"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27799"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28686"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28687"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28690"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-30936"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-30937"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32259"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32636"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33535"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33899"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33900"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33905"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40310"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40311"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42050"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42326"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45031"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45358"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45359"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45624"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45664"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46520"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46521"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46522"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46523"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46559"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46692"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46693"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47165"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47166"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48733"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48734"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48994"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49218"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53460"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53461"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53463"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53466"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53467"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55510"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55577"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55594"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55595"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56361"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56362"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56363"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56366"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56367"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56368"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56370"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56371"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56373"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56376"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56377"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56378"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56379"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61465"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61857"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61858"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61861"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61863"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61870"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62343"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62946"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93586"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93587"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93588"}],"affected":[{"package":{"name":"ImageMagick","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/ImageMagick?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.52-2.el9_6.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790182513.json"}},{"package":{"name":"ImageMagick-c++","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/ImageMagick-c++?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.52-2.el9_6.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790182513.json"}},{"package":{"name":"ImageMagick-c++-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/ImageMagick-c++-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.52-2.el9_6.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790182513.json"}},{"package":{"name":"ImageMagick-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/ImageMagick-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.52-2.el9_6.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790182513.json"}},{"package":{"name":"ImageMagick-djvu","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/ImageMagick-djvu?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.52-2.el9_6.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790182513.json"}},{"package":{"name":"ImageMagick-doc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/ImageMagick-doc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.52-2.el9_6.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790182513.json"}},{"package":{"name":"ImageMagick-libs","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/ImageMagick-libs?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.52-2.el9_6.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790182513.json"}},{"package":{"name":"ImageMagick-perl","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/ImageMagick-perl?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.52-2.el9_6.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790182513.json"}}],"schema_version":"1.9.0"}