p PatchFirst

SUSE-SU-2026:0011-1

SUSE-SU-2026:0011-1 · Security update for ImageMagick

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow in the TIM image parser's `ReadTIMImage` function can lead to arbitrary memory disclosure on 32-bit systems (bsc#1254820).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • imagemagick SUSE:Linux Enterprise Server 15 SP6-LTSS

    Affected ranges
    • ECOSYSTEM: < 7.1.1.21-150600.3.32.1

    Update to 7.1.1.21-150600.3.32.1

  • imagemagick SUSE:Linux Enterprise Server for SAP Applications 15 SP6

    Affected ranges
    • ECOSYSTEM: < 7.1.1.21-150600.3.32.1

    Update to 7.1.1.21-150600.3.32.1

  • imagemagick openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 7.1.1.21-150600.3.32.1

    Update to 7.1.1.21-150600.3.32.1

Original sources

Check your server →