Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
ImageMagick on CentOS Stream may leak memory
published 1 month ago
Summary
Several versions of ImageMagick for CentOS Stream can leave memory behind when handling certain image operations, which could slow down servers or cause crashes. The update replaces the old code with a newer version that fixes these leaks and other stability issues. Apply the latest CentOS Stream ImageMagick packages to keep your systems running smoothly.
What to do
- Update centos-stream imagemagick to version 6.9.13.52-2.el8.tuxcare.els1.
- Update centos-stream imagemagick-c++ to version 6.9.13.52-2.el8.tuxcare.els1.
- Update centos-stream imagemagick-c++-devel to version 6.9.13.52-2.el8.tuxcare.els1.
- Update centos-stream imagemagick-devel to version 6.9.13.52-2.el8.tuxcare.els1.
- Update centos-stream imagemagick-djvu to version 6.9.13.52-2.el8.tuxcare.els1.
- Update centos-stream imagemagick-doc to version 6.9.13.52-2.el8.tuxcare.els1.
- Update centos-stream imagemagick-libs to version 6.9.13.52-2.el8.tuxcare.els1.
- Update centos-stream imagemagick-perl to version 6.9.13.52-2.el8.tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS-Stream:8 | centos-stream | imagemagick |
< 6.9.13.52-2.el8.tuxcare.els1 Fix: upgrade to 6.9.13.52-2.el8.tuxcare.els1
|
| TuxCare:CentOS-Stream:8 | centos-stream | imagemagick-c++ |
< 6.9.13.52-2.el8.tuxcare.els1 Fix: upgrade to 6.9.13.52-2.el8.tuxcare.els1
|
| TuxCare:CentOS-Stream:8 | centos-stream | imagemagick-c++-devel |
< 6.9.13.52-2.el8.tuxcare.els1 Fix: upgrade to 6.9.13.52-2.el8.tuxcare.els1
|
| TuxCare:CentOS-Stream:8 | centos-stream | imagemagick-devel |
< 6.9.13.52-2.el8.tuxcare.els1 Fix: upgrade to 6.9.13.52-2.el8.tuxcare.els1
|
| TuxCare:CentOS-Stream:8 | centos-stream | imagemagick-djvu |
< 6.9.13.52-2.el8.tuxcare.els1 Fix: upgrade to 6.9.13.52-2.el8.tuxcare.els1
|
| TuxCare:CentOS-Stream:8 | centos-stream | imagemagick-doc |
< 6.9.13.52-2.el8.tuxcare.els1 Fix: upgrade to 6.9.13.52-2.el8.tuxcare.els1
|
| TuxCare:CentOS-Stream:8 | centos-stream | imagemagick-libs |
< 6.9.13.52-2.el8.tuxcare.els1 Fix: upgrade to 6.9.13.52-2.el8.tuxcare.els1
|
| TuxCare:CentOS-Stream:8 | centos-stream | imagemagick-perl |
< 6.9.13.52-2.el8.tuxcare.els1 Fix: upgrade to 6.9.13.52-2.el8.tuxcare.els1
|
Original advisory text
ImageMagick: Fix of 2 CVEs
- Rebase to EPEL 8 ImageMagick-6.9.13.52-2.el8, picking up the vendor's
upstream soname-revert patch
- Drop the TuxCare backports for CVE-2026-61857, CVE-2026-61861,
CVE-2026-61863, CVE-2026-61866 and CVE-2026-61870: all five are fixed in the
6.9.13.52 tarball, verified against the extracted source rather than the
changelog
- Keep the CVE-2026-45664 backport: upstream dd198f960 landed in ImageMagick 7
and never reached the 6.x line, so both MNG_MAX_LOOP_OPS abort paths in
coders/png.c still leak the chunk buffer here
- Keep the MSL empty-image crash fix (partial backport of upstream fde1f305,
not present in the legacy 6.x line)
- CVE-2026-86420: relinquish the MemoryResource reservation when the
in-memory pixel-cache allocation fails in OpenPixelCache (magick/cache.c)
- CVE-2026-86421: destroy the level's draw_info when MSLEndElement pops a
group (coders/msl.c) to prevent a memory leak
upstream soname-revert patch
- Drop the TuxCare backports for CVE-2026-61857, CVE-2026-61861,
CVE-2026-61863, CVE-2026-61866 and CVE-2026-61870: all five are fixed in the
6.9.13.52 tarball, verified against the extracted source rather than the
changelog
- Keep the CVE-2026-45664 backport: upstream dd198f960 landed in ImageMagick 7
and never reached the 6.x line, so both MNG_MAX_LOOP_OPS abort paths in
coders/png.c still leak the chunk buffer here
- Keep the MSL empty-image crash fix (partial backport of upstream fde1f305,
not present in the legacy 6.x line)
- CVE-2026-86420: relinquish the MemoryResource reservation when the
in-memory pixel-cache allocation fails in OpenPixelCache (magick/cache.c)
- CVE-2026-86421: destroy the level's draw_info when MSLEndElement pops a
group (coders/msl.c) to prevent a memory leak
References
- https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1789467169.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-86420 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-86421 Vendor Advisory
Timeline
Published15 Sep 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1789467169 · OSV
Track software like this
Free during beta