SUSE-SU-2025:4427-1
SUSE-SU-2025:4427-1 · Security update for ImageMagick
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow in the TIM image parser's `ReadTIMImage` function can lead to arbitrary memory disclosure on 32-bit systems (bsc#1254820).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
imagemagick SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
- Affected ranges
- ECOSYSTEM: < 7.1.1.43-150700.3.27.1
Update to 7.1.1.43-150700.3.27.1
imagemagick SUSE:Linux Enterprise Module for Development Tools 15 SP7
- Affected ranges
- ECOSYSTEM: < 7.1.1.43-150700.3.27.1
Update to 7.1.1.43-150700.3.27.1