SUSE-SU-2026:3219-1

SUSE-SU-2026:3219-1 · Security update for ImageMagick

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.

This update for ImageMagick fixes the following issues: - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in `OpenPixelCache` (bsc#1271100). - CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316). - CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized `magnify:method` value (bsc#1271314). - CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315). - CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495). - CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006). - CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496). - CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313). - CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312). - CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311). - CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497). - CVE-2026-61860: use-after-free when `freetype` initialization fails (bsc#1271494). - CVE-2026-61861: use-after-free in `FormatMagickCaption` when memory allocation fails (bsc#1271294). - CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493). - CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492). - CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491). - CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490). - CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489). - CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488). - CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487). - CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486). - CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293). - CVE-2026-61872: memory leak in TIFF encoder when invalid `tiff:tile-geometry` is specified (bsc#1271484). - Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).

Korrektur verfügbar

Veröffentlicht

2026-07-23T17:35:28Z

Aktualisiert

2026-07-24T17:16:05.077596051Z

Technologie-Stack: system

Prüfen Sie Ihren Server →