SUSE-SU-2026:4376-1

SUSE-SU-2026:4376-1 · Security update for ImageMagick

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided (bsc#1272575). - CVE-2026-62363: heap buffer over-write in fx operation (bsc#1272582). - CVE-2026-62946: integer overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds (bsc#1272580). - CVE-2026-64685: heap buffer over-read in BGR decoder due to missing end-of-file check (bsc#1272953). - CVE-2026-66011: memory Leak when providing invalid options to the cli (bsc#1272577). - CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794). - CVE-2026-86425: denial of Service due to heap-use-after-free vulnerability (bsc#1279797). - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service (bsc#1281909). - CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910). - CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911). - GHSA-hc76-7mpc-qjqh: code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (bsc#1272579).

Corrección disponible

Publicación

2026-09-28T15:16:14Z

Actualización

2026-09-29T09:15:10.896797296Z

Pila tecnológica: system

Comprueba tu servidor →