SUSE-SU-2025:02188-1
SUSE-SU-2025:02188-1 · Security update for ImageMagick
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2025-43965: mishandling of image depth after SetQuantumFormat is used in MIFF image processing (bsc#1241659). - CVE-2025-46393: mishandling of packet_size and rendering of channels in arbitrary order in multispectral MIFF image processing (bsc#1241658). Other issues fixed: - Restore SUSE specific hardening config policies that got lost in refactoring (bsc#1243622).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
imagemagick SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
- Affected ranges
- ECOSYSTEM: < 7.1.1.43-150700.3.3.1
Update to 7.1.1.43-150700.3.3.1
imagemagick SUSE:Linux Enterprise Module for Development Tools 15 SP7
- Affected ranges
- ECOSYSTEM: < 7.1.1.43-150700.3.3.1
Update to 7.1.1.43-150700.3.3.1
Original sources
- https://www.suse.com/support/update/announcement/2025/suse-su-202502188-1/
- https://bugzilla.suse.com/1241658
- https://bugzilla.suse.com/1241659
- https://bugzilla.suse.com/1243622
- https://www.suse.com/security/cve/CVE-2025-43965
- https://www.suse.com/security/cve/CVE-2025-46393
- https://osv.dev/vulnerability/SUSE-SU-2025:02188-1