{"id":"CLSA-2026-1774010344","summary":"Fix of 8 CVEs","details":"   * SECURITY UPDATE: stack buffer overflow in msl.c (attribute handling),\n     path traversal bypass of security policy, XSS in HTML coder output,\n     and MSL attribute overflow\n     - debian/patches/CVE-2026-25797_CVE-2026-25965_CVE-2026-25968_CVE-2026-25982.patch: Fix memory leaks,\n       stack overflows, integer overflows and out‑of‑bounds reads; add bounds\n       checks, validate DCM entry sizes, sanitize PostScript filenames,\n       canonicalize paths and free resources; escape user-controlled strings\n       written as raw HTML in the HTML coder; cause was unsafe header and\n       filename parsing, incorrect assumptions about byte counts, path\n       resolution, unnormalized path matching allowing policy bypass, and\n       unescaped HTML output enabling cross-site scripting.\n     - CVE-2026-25797\n     - CVE-2026-25965\n     - CVE-2026-25968\n     - CVE-2026-25982\n   * SECURITY UPDATE: null pointer dereference in msl.c (repage/roll handlers)\n     - debian/patches/CVE-2026-25983.patch: move image null‑checks before\n       accessing image attributes in the repage and roll MSL tag handlers;\n       cause was dereferencing the image pointer for page geometry and\n       dimensions before verifying the image was defined.\n     - CVE-2026-25983\n   * SECURITY UPDATE: infinite recursion via crafted MSL/SVG/MVG files\n     - debian/patches/CVE-2026-25971.patch: add global Splay tree guards in\n       MSL and SVG coders to detect and reject recursive image references;\n       block dangerous protocols (ftp, http, mvg, vid) in DrawPrimitive;\n       cause was unbounded recursion through nested image reads.\n     - CVE-2026-25971\n   * SECURITY UPDATE: null pointer dereference in msl.c (comment/label handlers)\n     - debian/patches/CVE-2026-23952.patch: add image null-checks before\n       accessing image properties in the comment and label MSL end-element\n       handlers; cause was dereferencing the image pointer for\n       DeleteImageProperty before verifying the image was defined.\n     - CVE-2026-23952\n   * SECURITY UPDATE: MSLPushImage return value not captured\n     - debian/patches/CVE-2026-25988.patch: change MSLPushImage to return\n       the new image index and capture the return value in the MSL image\n       tag handler; cause was the local index variable not being updated\n       after pushing a new image onto the stack.\n     - CVE-2026-25988","modified":"2026-06-04T10:05:00.545752829Z","published":"2026-03-20T12:39:07Z","upstream":["CVE-2026-23952","CVE-2026-25797","CVE-2026-25965","CVE-2026-25968","CVE-2026-25971","CVE-2026-25982","CVE-2026-25983","CVE-2026-25988"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1774010344.html"}],"affected":[{"package":{"name":"imagemagick","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/imagemagick?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"imagemagick-6.q16","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/imagemagick-6.q16?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"imagemagick-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/imagemagick-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"imagemagick-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/imagemagick-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libimage-magick-perl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libimage-magick-perl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libimage-magick-q16-perl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libimage-magick-q16-perl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagick++-6-headers","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagick++-6-headers?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagick++-6.q16-5v5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16-5v5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagick++-6.q16-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagick++-6.q16-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagick++-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagick++-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickcore-6-arch-config","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickcore-6-arch-config?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickcore-6-headers","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickcore-6-headers?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickcore-6.q16-2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickcore-6.q16-2-extra","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-2-extra?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickcore-6.q16-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickcore-6.q16-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickcore-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickcore-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickwand-6-headers","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickwand-6-headers?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickwand-6.q16-2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickwand-6.q16-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickwand-6.q16-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"libmagickwand-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libmagickwand-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}},{"package":{"name":"perlmagick","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/perlmagick?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1774010344.json"}}],"schema_version":"1.7.5"}