{"id":"CLSA-2026-1790949439","summary":"Fix CVE(s): CVE-2026-93586, CVE-2026-93587, CVE-2026-93588","details":"   * SECURITY UPDATE: use-after-free in ImagesToBlob() when writing a\n     multi-image list to an in-memory blob\n     - debian/patches/CVE-2026-93586.patch: add SyncBlobStream() and call it\n       after WriteImage()/WriteImages() so the owner image and image info\n       track the live blob buffer, in magick/blob.c, magick/blob-private.h\n       and magick/constitute.c\n     - CVE-2026-93586\n   * SECURITY UPDATE: resource policy bypass in the PCD and HALD coders\n     - debian/patches/CVE-2026-93587.patch: check the list-length resource\n       limit before cloning image_info-\u003escene frames, in coders/pcd.c and\n       coders/hald.c\n     - CVE-2026-93587\n   * SECURITY UPDATE: NULL pointer dereference in the PNM coder\n     - debian/patches/CVE-2026-93588.patch: check the comment buffer for NULL\n       before using it, in PNMComment() and ReadPNMImage() in coders/pnm.c\n     - CVE-2026-93588","modified":"2026-10-26T09:31:53.674135079Z","published":"2026-10-02T13:57:37Z","upstream":["CVE-2026-93586","CVE-2026-93587","CVE-2026-93588"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1790949439.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93586"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93587"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93588"}],"affected":[{"package":{"name":"imagemagick","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/imagemagick?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"imagemagick-6-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/imagemagick-6-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"imagemagick-6-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/imagemagick-6-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"imagemagick-6.q16","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/imagemagick-6.q16?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"imagemagick-6.q16hdri","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/imagemagick-6.q16hdri?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"imagemagick-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/imagemagick-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"imagemagick-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/imagemagick-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libimage-magick-perl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libimage-magick-perl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libimage-magick-q16-perl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libimage-magick-q16-perl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libimage-magick-q16hdri-perl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libimage-magick-q16hdri-perl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagick++-6-headers","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagick++-6-headers?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagick++-6.q16-8","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagick++-6.q16-8?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagick++-6.q16-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagick++-6.q16-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagick++-6.q16hdri-8","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagick++-6.q16hdri-8?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagick++-6.q16hdri-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagick++-6.q16hdri-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagick++-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagick++-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickcore-6-arch-config","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickcore-6-arch-config?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickcore-6-headers","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickcore-6-headers?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickcore-6.q16-6","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-6?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickcore-6.q16-6-extra","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-6-extra?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickcore-6.q16-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickcore-6.q16hdri-6","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-6?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickcore-6.q16hdri-6-extra","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-6-extra?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickcore-6.q16hdri-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickcore-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickcore-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickwand-6-headers","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickwand-6-headers?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickwand-6.q16-6","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-6?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickwand-6.q16-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickwand-6.q16hdri-6","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickwand-6.q16hdri-6?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickwand-6.q16hdri-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickwand-6.q16hdri-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"libmagickwand-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libmagickwand-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}},{"package":{"name":"perlmagick","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/perlmagick?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els20"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1790949439.json"}}],"schema_version":"1.9.0"}