{"id":"CLSA-2026-1791975274","summary":"Fix of 5 CVEs","details":"   * SECURITY UPDATE: infinite loop in the XML parser via parameter entities\n     - debian/patches/CVE-2026-106568.patch: also check parameter entity\n       ('%') references for circular declarations in ValidateEntities() and\n       ParseInternalDoctype() in magick/xml-tree.c\n     - CVE-2026-106568\n   * SECURITY UPDATE: uninitialized memory read in the TGA decoder\n     - debian/patches/CVE-2026-109259.patch: zero-initialize the TGA header\n       in ReadTGAImage() in coders/tga.c\n     - CVE-2026-109259\n   * SECURITY UPDATE: memory leak in the YUV encoder\n     - debian/patches/CVE-2026-109263.patch: release the resized image when\n       the chroma resize fails, and the chroma image when the scene loop\n       exits early, in WriteYUVImage() in coders/yuv.c\n     - CVE-2026-109263\n   * SECURITY UPDATE: PostScript code injection through font names\n     - debian/patches/CVE-2026-109275.patch: only pass font names made of\n       alphanumerics, '-', '_' and '.' to the PostScript renderer, otherwise\n       fall back to Times-Roman, in RenderPostscript() in magick/annotate.c\n     - CVE-2026-109275\n   * SECURITY UPDATE: memory leak in wavelet denoise\n     - debian/patches/CVE-2026-109278.patch: release the output image on the\n       resource and memory allocation failure paths in WaveletDenoiseImage()\n       in magick/fx.c\n     - CVE-2026-109278","modified":"2026-10-26T09:32:04.826904823Z","published":"2026-10-14T10:54:47Z","upstream":["CVE-2026-106568","CVE-2026-109259","CVE-2026-109263","CVE-2026-109275","CVE-2026-109278"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1791975274.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106568"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109259"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109263"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109275"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109278"}],"affected":[{"package":{"name":"imagemagick","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"imagemagick-6-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-6-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"imagemagick-6-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-6-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"imagemagick-6.q16","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-6.q16?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"imagemagick-6.q16hdri","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-6.q16hdri?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"imagemagick-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"imagemagick-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/imagemagick-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libimage-magick-perl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libimage-magick-perl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libimage-magick-q16-perl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libimage-magick-q16-perl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libimage-magick-q16hdri-perl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libimage-magick-q16hdri-perl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagick++-6-headers","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6-headers?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagick++-6.q16-7","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16-7?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagick++-6.q16-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagick++-6.q16hdri-7","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16hdri-7?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagick++-6.q16hdri-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16hdri-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagick++-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagick++-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickcore-6-arch-config","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6-arch-config?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickcore-6-headers","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6-headers?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickcore-6.q16-3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickcore-6.q16-3-extra","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-3-extra?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickcore-6.q16-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickcore-6.q16hdri-3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickcore-6.q16hdri-3-extra","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-3-extra?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickcore-6.q16hdri-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16hdri-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickcore-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickcore-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickwand-6-headers","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6-headers?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickwand-6.q16-3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickwand-6.q16-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickwand-6.q16hdri-3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16hdri-3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickwand-6.q16hdri-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16hdri-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"libmagickwand-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libmagickwand-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}},{"package":{"name":"perlmagick","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/perlmagick?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791975274.json"}}],"schema_version":"1.9.0"}