Astra Linux – Vulnerability in imagemagick

ImageMagick prior to version 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex, which is caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation is performed. Attackers can exploit this vulnerability to trigger memory and disk...

CLSA-2026-1791540596 ImageMagick: Fix of 3 CVEs

CVE-2026-86420: release the memory resource reserved by OpenPixelCache when the in-memory pixel cache cannot be allocated to prevent exhausting the memory budget - CVE-2026-86421: free the DrawInfo of each image released when the MSL decoder closes a group element to prevent a memory leak...

CLSA-2026-1791541499 ImageMagick: Fix of 2 CVEs

CVE-2026-86420: release the memory resource reserved by OpenPixelCache when the in-memory pixel cache cannot be allocated to prevent exhausting the memory budget - CVE-2026-86421: free the DrawInfo of each image released when the MSL decoder closes a group element to prevent a memory leak...

AlmaLinux 9.2 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791541499)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791541499 advisory. - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails...

Rocky Linux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791540596)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791540596 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and...

AlmaLinux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791540596)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791540596 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and...

ImageMagick < 6.9.13-40 / 7.x < 7.1.2-15 Vulnerability

The remote host has a version of ImageMagick installed that is prior to 6.9.13-40, or 7.x prior to 7.1.2-15. It is, therefore, affected by a vulnerability. - ImageMagick before 7.1.2-15 and before 6.9.13-40 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCac...

CentOS Linux 8.5 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1789467564)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1789467564 advisory. - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails...

CentOS Linux 8 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1789467169)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1789467169 advisory. - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1789467167)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1789467167 advisory. - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails...

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (CENTOS7:CLSA-2026:1789650963)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1789650963 advisory. - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated...

CLSA-2026-1789650963 ImageMagick: Fix of CVE-2026-86420

CVE-2026-86420: release the memory-resource budget in OpenPixelCache magick/cache.c when the pixel allocation fails and the cache falls back to the source pixels, so repeated allocation failures cannot exhaust the process memory budget...

CLSA-2026-1789650252 ImageMagick: Fix of CVE-2026-86420

CVE-2026-86420: release the memory-resource budget in OpenPixelCache magick/cache.c when the pixel allocation fails and the cache falls back to the source pixels, so repeated allocation failures cannot exhaust the process memory budget...

CLSA-2026-1789467419 ImageMagick: Fix of 2 CVEs

Rebase to EPEL 8 ImageMagick-6.9.13.52-2.el8, picking up the vendor's upstream soname-revert patch - Drop the TuxCare backports for CVE-2026-61857, CVE-2026-61861, CVE-2026-61863, CVE-2026-61866 and CVE-2026-61870: all five are fixed in the 6.9.13.52 tarball, verified against the extracted source...

CLSA-2026-1789463769 Fix CVE(s): CVE-2026-86420

SECURITY UPDATE: memory resource leak in the pixel cache when the cache allocation fails - debian/patches/CVE-2026-86420.patch: release the reserved MemoryResource with RelinquishMagickResource when the pixel allocation returns NULL in OpenPixelCache in magick/cache.c - CVE-2026-86420...

CLSA-2026-1789463409 ImageMagick: Fix of CVE-2026-86420

CVE-2026-86420: release the memory-resource budget in OpenPixelCache magick/cache.c when the pixel allocation fails and the cache falls back to the source pixels, so repeated allocation failures cannot exhaust the process memory budget...

SUSE CVE-2026-86420

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...