Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3441-1

Опубликовано: 31 июл. 2026
Источник: suse-cvrf

Описание

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue:

  • CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878).

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP7
GraphicsMagick-1.3.42-150600.3.42.1
GraphicsMagick-devel-1.3.42-150600.3.42.1
libGraphicsMagick++-Q16-12-1.3.42-150600.3.42.1
libGraphicsMagick++-devel-1.3.42-150600.3.42.1
libGraphicsMagick-Q16-3-1.3.42-150600.3.42.1
libGraphicsMagick3-config-1.3.42-150600.3.42.1
libGraphicsMagickWand-Q16-2-1.3.42-150600.3.42.1
perl-GraphicsMagick-1.3.42-150600.3.42.1

Ссылки

Описание

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:GraphicsMagick-1.3.42-150600.3.42.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:GraphicsMagick-devel-1.3.42-150600.3.42.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:libGraphicsMagick++-Q16-12-1.3.42-150600.3.42.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:libGraphicsMagick++-devel-1.3.42-150600.3.42.1
Ссылки