Amazon Linux 2 : ImageMagick (ALAS-2026-3939)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Amazon Linux 2 Security Advisory ALAS-2026-3939.
##

include('compat.inc');

if (description)
{
  script_id(351044);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/29");

  script_cve_id(
    "CVE-2026-53466",
    "CVE-2026-53467",
    "CVE-2026-55577",
    "CVE-2026-55594",
    "CVE-2026-55595",
    "CVE-2026-55597",
    "CVE-2026-55628",
    "CVE-2026-56361",
    "CVE-2026-56362",
    "CVE-2026-56363",
    "CVE-2026-56365",
    "CVE-2026-56366",
    "CVE-2026-56369",
    "CVE-2026-56373",
    "CVE-2026-56377",
    "CVE-2026-61464",
    "CVE-2026-61465",
    "CVE-2026-61857",
    "CVE-2026-61858",
    "CVE-2026-61862",
    "CVE-2026-61863",
    "CVE-2026-61864",
    "CVE-2026-61865",
    "CVE-2026-61866",
    "CVE-2026-61868",
    "CVE-2026-61869",
    "CVE-2026-61870",
    "CVE-2026-61872",
    "CVE-2026-62343",
    "CVE-2026-64685",
    "CVE-2026-86420",
    "CVE-2026-86421",
    "CVE-2026-86423",
    "CVE-2026-86425"
  );
  script_xref(name:"IAVB", value:"2026-B-0196-S");
  script_xref(name:"IAVB", value:"2026-B-0253");

  script_name(english:"Amazon Linux 2 : ImageMagick (ALAS-2026-3939)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Amazon Linux 2 host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by multiple
vulnerabilities as referenced in the ALAS2-2026-3939 advisory.

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to
    versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds
    read when a crafted image is read, potentially resulting in a crash. This issue has been fixed in versions
    6.9.13-51 and 7.1.2-26. (CVE-2026-53466)

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to
    versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap information disclosure
    vulnerability because part of the pixels are left unchanged. This issue has been fixed in versions
    6.9.13-51 and 7.1.2-26. (CVE-2026-53467)

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to
    versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an
    out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and
    7.1.2-26. (CVE-2026-55577)

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to
    versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow
    when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.
    (CVE-2026-55594)

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to
    versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the connected-components option an
    infinite loop will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26. (CVE-2026-55595)

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to
    version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2
    encoder. This issue has been fixed in version7.1.2-26. (CVE-2026-55597)

    In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially
    resulting in both reading and writing to paths disallowed by the security policy. This issue has been
    fixed in version 7.1.2-26. (CVE-2026-55628)

    ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds
    heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters
    causing single pixel memory access violations. (CVE-2026-56361)

    ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by
    OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger
    memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling
    GetPixelIndex. (CVE-2026-56362)

    ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that
    allows attackers to cause denial of service. An attacker can supply a large binomial kernel value causing
    integer overflow, resulting in division by zero and application crash. (CVE-2026-56363)

    ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG
    images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial
    of service. (CVE-2026-56365)

    ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing
    APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image
    files, causing denial of service through resource exhaustion. (CVE-2026-56366)

    ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage
    method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to
    recover plaintext information from encrypted images. (CVE-2026-56369)

    ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale
    pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB
    files to cause crashes or write a single zero byte to freed memory. (CVE-2026-56373)

    ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate
    files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed
    conversion services to write arbitrary files outside intended boundaries. (CVE-2026-56377)

    ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that
    occurs when running an X11 import with a crafted window title, which can result in heap memory corruption
    and denial of service. (CVE-2026-61464)

    ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in
    matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to
    allocate more memory than permitted by the configured policy, resulting in a denial of service.
    (CVE-2026-61465)

    ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when
    parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger
    the vulnerability and cause application crashes. (CVE-2026-61857)

    ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external
    delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing
    configured policy restrictions through the APNG encoding process. (CVE-2026-61858)

    ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile
    is displayed with the identify command and the profile value is not printable, a single byte at the end of
    the profile can be printed (read past the profile boundary). This behavior occurs when debug output is
    enabled. (CVE-2026-61862)

    ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that
    occurs when a temporary file cannot be created, resulting in a small memory leak. (CVE-2026-61863)

    ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log
    colorspace: when the operation fails, a small amount of memory is not released. (CVE-2026-61864)

    ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation: when a
    specific operation fails, a small memory leak occurs. (CVE-2026-61865)

    ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be
    opened. Attackers can trigger the memory leak by providing malformed JNG files that fail blob operations,
    causing resource exhaustion. (CVE-2026-61866)

    ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder that
    occurs when opening of the blob fails. Repeated triggering can lead to resource exhaustion (denial of
    service). (CVE-2026-61868)

    ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a
    memory allocation fails during MIFF image processing, which can lead to denial of service.
    (CVE-2026-61869)

    ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory
    allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to
    exhaust available memory and cause denial of service. (CVE-2026-61870)

    ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid
    tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not
    to be released, which can lead to increased memory consumption. (CVE-2026-61872)

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions
    prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid kernel can cause a heap buffer
    over-write when performing a morphology operation with a user supplied kernel. This issue has been fixed
    in versions 6.9.13-51 and 7.1.2-26. (CVE-2026-62343)

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions
    prior to 7.1.2-27, the BGR decoder does not check for an end-of-file in every location so a crafted image
    could result in an heap buffer over-read. This issue has been fixed in version 7.1.2-27. (CVE-2026-64685)

    ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation
    inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget
    and result in a denial of service. (CVE-2026-86420)

    ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL
    image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and
    cause a denial of service. (CVE-2026-86421)

    ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the
    GetList method of PerlMagick. A crafted call to the GetList method can trigger the use-after-free,
    resulting in a crash (denial of service). (CVE-2026-86423)

    ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the
    Layer method of PerlMagick. An attacker who supplies a crafted list of images can trigger memory access
    after deallocation, resulting in a crash (denial of service). (CVE-2026-86425)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com//AL2/ALAS2-2026-3939.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/faqs.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-53466.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-53467.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-55577.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-55594.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-55595.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-55597.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-55628.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-56361.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-56362.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-56363.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-56365.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-56366.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-56369.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-56373.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-56377.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61464.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61465.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61857.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61858.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61862.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61863.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61864.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61865.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61866.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61868.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61869.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61870.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-61872.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-62343.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64685.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-86420.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-86421.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-86423.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-86425.html");
  script_set_attribute(attribute:"solution", value:
"Run 'yum update ImageMagick' or
  or 'yum update --advisory ALAS2-2026-3939' to update your system.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-56361");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2026-86421");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/06/30");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/29");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ImageMagick");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ImageMagick-c++");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ImageMagick-c++-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ImageMagick-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ImageMagick-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ImageMagick-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ImageMagick-perl");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:amazon:linux:2");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Amazon Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/AmazonLinux/release", "Host/AmazonLinux/rpm-list");

  exit(0);
}

include("rpm2.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var alas_release = get_kb_item("Host/AmazonLinux/release");
if (isnull(alas_release) || !strlen(alas_release)) audit(AUDIT_OS_NOT, "Amazon Linux");
var os_ver = pregmatch(pattern: "^AL(A|\d+|-\d+)", string:alas_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Amazon Linux");
os_ver = os_ver[1];
if (os_ver != "2")
{
  if (os_ver == 'A') os_ver = 'AMI';
  audit(AUDIT_OS_NOT, "Amazon Linux 2", "Amazon Linux " + os_ver);
}

if (!get_kb_item("Host/AmazonLinux/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var pkgs = [
    {'reference':'ImageMagick-6.9.10.97-1.amzn2.0.32', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-6.9.10.97-1.amzn2.0.32', 'cpu':'i686', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-6.9.10.97-1.amzn2.0.32', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-c++-6.9.10.97-1.amzn2.0.32', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-c++-6.9.10.97-1.amzn2.0.32', 'cpu':'i686', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-c++-6.9.10.97-1.amzn2.0.32', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.32', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.32', 'cpu':'i686', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.32', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-debuginfo-6.9.10.97-1.amzn2.0.32', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-debuginfo-6.9.10.97-1.amzn2.0.32', 'cpu':'i686', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-debuginfo-6.9.10.97-1.amzn2.0.32', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-devel-6.9.10.97-1.amzn2.0.32', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-devel-6.9.10.97-1.amzn2.0.32', 'cpu':'i686', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-devel-6.9.10.97-1.amzn2.0.32', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-doc-6.9.10.97-1.amzn2.0.32', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-doc-6.9.10.97-1.amzn2.0.32', 'cpu':'i686', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-doc-6.9.10.97-1.amzn2.0.32', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-perl-6.9.10.97-1.amzn2.0.32', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-perl-6.9.10.97-1.amzn2.0.32', 'cpu':'i686', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ImageMagick-perl-6.9.10.97-1.amzn2.0.32', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var el_string = NULL;
  var rpm_spec_vers_cmp = NULL;
  var epoch = NULL;
  var allowmaj = NULL;
  var exists_check = NULL;
  var cves = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
  if (reference && _release && (!exists_check || rpm_exists(release:_release, rpm:exists_check))) {
    if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc");
}