{"id":"CLSA-2026-1792144313","summary":"ImageMagick: Fix of 24 CVEs","details":"- Rebase to EPEL 8 ImageMagick-6.9.13.58-1.el8\n- Drop the vendor soname-revert patch: the 6.9.13.58 tarball already sets\n  MAGICK_LIBRARY_CURRENT=7, matching the libraries shipped so far\n- Drop the TuxCare backports for CVE-2026-86420, CVE-2026-86421,\n  CVE-2026-93586, CVE-2026-93587, CVE-2026-93588, CVE-2026-106571,\n  CVE-2026-106572, CVE-2026-106573, CVE-2026-106577, CVE-2026-106578,\n  CVE-2026-106579, CVE-2026-106580, CVE-2026-107208 and CVE-2026-107210: all\n  are fixed in the 6.9.13.58 tarball, verified against the extracted source\n- Keep the CVE-2026-45664 backport: both MNG_MAX_LOOP_OPS abort paths in\n  coders/png.c still leak the chunk buffer in 6.9.13.58\n- Keep the MSL empty-image crash fix (partial backport of upstream fde1f305,\n  not present in the legacy 6.x line)","modified":"2026-10-26T09:43:41.166013194Z","published":"2026-10-23T06:46:28Z","upstream":["CVE-2026-106571","CVE-2026-106572","CVE-2026-106573","CVE-2026-106577","CVE-2026-106578","CVE-2026-106579","CVE-2026-106580","CVE-2026-107208","CVE-2026-107210","CVE-2026-45664","CVE-2026-86420","CVE-2026-86421","CVE-2026-93586","CVE-2026-93587","CVE-2026-93588"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1792144313.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105081"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106565"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106566"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106568"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106571"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106572"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106577"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106579"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106580"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107208"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109259"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109261"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109262"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109263"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109266"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109267"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109268"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109269"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109273"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109275"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109276"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109278"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109282"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55628"}],"affected":[{"package":{"name":"ImageMagick","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/ImageMagick?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.58-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1792144313.json"}},{"package":{"name":"ImageMagick-c++","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/ImageMagick-c++?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.58-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1792144313.json"}},{"package":{"name":"ImageMagick-c++-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/ImageMagick-c++-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.58-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1792144313.json"}},{"package":{"name":"ImageMagick-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/ImageMagick-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.58-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1792144313.json"}},{"package":{"name":"ImageMagick-djvu","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/ImageMagick-djvu?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.58-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1792144313.json"}},{"package":{"name":"ImageMagick-doc","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/ImageMagick-doc?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.58-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1792144313.json"}},{"package":{"name":"ImageMagick-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/ImageMagick-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.58-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1792144313.json"}},{"package":{"name":"ImageMagick-perl","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/ImageMagick-perl?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.58-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1792144313.json"}}],"schema_version":"1.9.0"}