Описание
Security update for ImageMagick
This update for ImageMagick fixes the following issues
- CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081).
- CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
- CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
- CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
- CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
- CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006).
- CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313).
- CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312).
- CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
- CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory allocation fails (bsc#1271294).
- CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1268640
- SUSE Bug 1270006
- SUSE Bug 1270081
- SUSE Bug 1271100
- SUSE Bug 1271293
- SUSE Bug 1271294
- SUSE Bug 1271311
- SUSE Bug 1271312
- SUSE Bug 1271313
- SUSE Bug 1271314
- SUSE Bug 1271315
- SUSE Bug 1271316
- SUSE CVE CVE-2026-55628 page
- SUSE CVE CVE-2026-56362 page
- SUSE CVE CVE-2026-56366 page
- SUSE CVE CVE-2026-56372 page
- SUSE CVE CVE-2026-56373 page
- SUSE CVE CVE-2026-56377 page
- SUSE CVE CVE-2026-61465 page
Описание
In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.
Затронутые продукты
Ссылки
- CVE-2026-55628
- SUSE Bug 1270081
Описание
ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.
Затронутые продукты
Ссылки
- CVE-2026-56362
- SUSE Bug 1271100
Описание
ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.
Затронутые продукты
Ссылки
- CVE-2026-56366
- SUSE Bug 1271316
Описание
ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:method value triggers an out of bounds read, potentially exposing sensitive information or causing denial of service.
Затронутые продукты
Ссылки
- CVE-2026-56372
- SUSE Bug 1271314
Описание
ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.
Затронутые продукты
Ссылки
- CVE-2026-56373
- SUSE Bug 1271315
Описание
ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries.
Затронутые продукты
Ссылки
- CVE-2026-56377
- SUSE Bug 1270006
Описание
ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.
Затронутые продукты
Ссылки
- CVE-2026-61465
- SUSE Bug 1271313
Описание
ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.
Затронутые продукты
Ссылки
- CVE-2026-61857
- SUSE Bug 1271312
Описание
ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.
Затронутые продукты
Ссылки
- CVE-2026-61858
- SUSE Bug 1271311
Описание
ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.
Затронутые продукты
Ссылки
- CVE-2026-61861
- SUSE Bug 1271294
Описание
ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.
Затронутые продукты
Ссылки
- CVE-2026-61870
- SUSE Bug 1271293