Описание
Security update for ImageMagick
This update for ImageMagick fixes the following issues
- CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
- CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
- CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
- CVE-2026-61860: use-after-free when
freetypeinitialization fails (bsc#1271494). - CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
- CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
- CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
- CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
- CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
- CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
- CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
- CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
- CVE-2026-61871: memory leak in ICON decoder when allocation fails (bsc#1271485).
- CVE-2026-61872: memory leak in TIFF encoder when invalid
tiff:tile-geometryis specified (bsc#1271484). - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
- CVE-2026-56362: heap buffer overflow read in
GetPixelIndexdue to metadata-cache desynchronization inOpenPixelCache(bsc#1271100). - CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
- CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized
magnify:methodvalue (bsc#1271314). - CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
- CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
- CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
- CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
- CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
- CVE-2026-61861: use-after-free in
FormatMagickCaptionwhen memory allocation fails (bsc#1271294). - CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
Список пакетов
SUSE Linux Enterprise Module for Desktop Applications 15 SP7
SUSE Linux Enterprise Module for Development Tools 15 SP7
Ссылки
- Link for SUSE-SU-2026:3194-1
- E-Mail link for SUSE-SU-2026:3194-1
- SUSE Security Ratings
- SUSE Bug 1268640
- SUSE Bug 1270006
- SUSE Bug 1270081
- SUSE Bug 1271100
- SUSE Bug 1271293
- SUSE Bug 1271294
- SUSE Bug 1271311
- SUSE Bug 1271312
- SUSE Bug 1271313
- SUSE Bug 1271314
- SUSE Bug 1271315
- SUSE Bug 1271316
- SUSE Bug 1271484
- SUSE Bug 1271485
- SUSE Bug 1271486
- SUSE Bug 1271487
- SUSE Bug 1271488
Описание
In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.
Затронутые продукты
Ссылки
- CVE-2026-55628
- SUSE Bug 1270081
Описание
ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.
Затронутые продукты
Ссылки
- CVE-2026-56362
- SUSE Bug 1271100
Описание
ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.
Затронутые продукты
Ссылки
- CVE-2026-56366
- SUSE Bug 1271316
Описание
ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:method value triggers an out of bounds read, potentially exposing sensitive information or causing denial of service.
Затронутые продукты
Ссылки
- CVE-2026-56372
- SUSE Bug 1271314
Описание
ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.
Затронутые продукты
Ссылки
- CVE-2026-56373
- SUSE Bug 1271315
Описание
ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service.
Затронутые продукты
Ссылки
- CVE-2026-56375
- SUSE Bug 1271495
Описание
ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries.
Затронутые продукты
Ссылки
- CVE-2026-56377
- SUSE Bug 1270006
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.
Затронутые продукты
Ссылки
- CVE-2026-61464
- SUSE Bug 1271496
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.
Затронутые продукты
Ссылки
- CVE-2026-61465
- SUSE Bug 1271313
Описание
ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.
Затронутые продукты
Ссылки
- CVE-2026-61857
- SUSE Bug 1271312
Описание
ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.
Затронутые продукты
Ссылки
- CVE-2026-61858
- SUSE Bug 1271311
Описание
ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy.
Затронутые продукты
Ссылки
- CVE-2026-61859
- SUSE Bug 1271497
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memory that was already freed. This can be triggered during image processing and may lead to a denial of service.
Затронутые продукты
Ссылки
- CVE-2026-61860
- SUSE Bug 1271494
Описание
ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.
Затронутые продукты
Ссылки
- CVE-2026-61861
- SUSE Bug 1271294
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printed (read past the profile boundary). This behavior occurs when debug output is enabled.
Затронутые продукты
Ссылки
- CVE-2026-61862
- SUSE Bug 1271493
Описание
ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak.
Затронутые продукты
Ссылки
- CVE-2026-61863
- SUSE Bug 1271492
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation fails, a small amount of memory is not released.
Затронутые продукты
Ссылки
- CVE-2026-61864
- SUSE Bug 1271491
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation: when a specific operation fails, a small memory leak occurs.
Затронутые продукты
Ссылки
- CVE-2026-61865
- SUSE Bug 1271490
Описание
ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malformed JNG files that fail blob operations, causing resource exhaustion.
Затронутые продукты
Ссылки
- CVE-2026-61866
- SUSE Bug 1271489
Описание
ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service.
Затронутые продукты
Ссылки
- CVE-2026-61867
- SUSE Bug 1271488
Описание
ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder that occurs when opening of the blob fails. Repeated triggering can lead to resource exhaustion (denial of service).
Затронутые продукты
Ссылки
- CVE-2026-61868
- SUSE Bug 1271487
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, which can lead to denial of service.
Затронутые продукты
Ссылки
- CVE-2026-61869
- SUSE Bug 1271486
Описание
ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.
Затронутые продукты
Ссылки
- CVE-2026-61870
- SUSE Bug 1271293
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file that triggers an allocation failure leaks memory, which may lead to a denial of service.
Затронутые продукты
Ссылки
- CVE-2026-61871
- SUSE Bug 1271485
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not to be released, which can lead to increased memory consumption.
Затронутые продукты
Ссылки
- CVE-2026-61872
- SUSE Bug 1271484