This update for ImageMagick fixes the following issues:
- CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446).
- CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow
(bsc#1259447).
- CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow
(bsc#1259448).
- CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
- CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451).
- CVE-2026-2
This update for ImageMagick fixes the following issue:
- CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
This update for ImageMagick fixes the following issues:
- CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743).
- CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
- CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791).
- CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748).
- CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759).
- CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793).
- CVE-2026-25795: Denial of S
This update for ImageMagick fixes the following issues:
- CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969).
- CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
- CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
- CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).
This update for ImageMagick fixes the following issues:
- CVE-2025-68618: read a malicious SVG file may result in a DoS attack (bsc#1255821).
- CVE-2025-68950: check for circular references in mvg files may lead to stack overflow (bsc#1255822).
- CVE-2025-69204: an integer overflow can lead to a DoS attack (bsc#1255823).
This update for ImageMagick fixes the following issues:
- CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to
crashes or memory corruption (bsc#1254435).
- CVE-2025-66628: possible integer overflow in the TIM image parser's `ReadTIMImage` function can lead to arbitrary
memory disclosure on 32-bit systems (bsc#1254820).
This update for ImageMagick fixes the following issues:
- CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. (bsc#1252749)
This update for ImageMagick fixes the following issues:
- CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
(bsc#1248076).
- CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces (bsc#1248077).
- CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage (bsc#1248078).
- CVE-2025-55160: Fixed undefined behavior due to function-type-mismatch in CloneSplayTree (bsc#1248079).
- CVE-2025-55212: Fixed division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to
`mo
This update for ImageMagick fixes the following issues:
- CVE-2025-53014: Fixed an off-by-one error may cause an out-of-bounds memory access (bsc#1246530)
- CVE-2025-53015: Fixed specific XMP file conversion may cause an infinite loop (bsc#1246531)
- CVE-2025-53019: Fixed format specifiers in a filename template may cause a memory leak (bsc#1246534)
- CVE-2025-53101: Fixed input manipulation may lead to an out-of-bound write (bsc#1246529)
Changed policies:
* allow ImageMagick to read it's own files again (bsc#1246065)
This update for ImageMagick fixes the following issues:
- Restore SUSE specific hardening config policies that got lost in refactoring (bsc#1243622).
- Fix issues leading to `magick -gamma` not producing expected image results (bsc#1235113).
This update for ImageMagick fixes the following issues:
- CVE-2025-43965: mishandling of image depth after SetQuantumFormat is used in MIFF image processing. (bsc#1241659)
- CVE-2025-46393: mishandling of packet_size leads to rendering of channels in arbitrary order in multispectral
MIFF image processing. (bsc#1241658)