The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792140497 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer     calculation error and write beyond a heap buffer, crashing the server process. This issue is fixed in     versions 6.9.13-56 and 7.1.2-31. (CVE-2026-106571)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to     exhaust the call stack and terminate the process. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.
    (CVE-2026-106572)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an     excessively long-running operation. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.
    (CVE-2026-106573)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into output generated by PostScript     coders. This issue is fixed in versions 7.1.2-31 and 6.9.13-56. (CVE-2026-106577)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the     process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56. (CVE-2026-106578)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792140497)

high Nessus Plugin ID 371925

Version 1.2