Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21553-1

Опубликовано: 11 авг. 2026
Источник: suse-cvrf

Описание

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue:

  • CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878).

Список пакетов

openSUSE Leap 16.0
GraphicsMagick-1.3.45-160000.12.1
GraphicsMagick-devel-1.3.45-160000.12.1
libGraphicsMagick++-Q16-12-1.3.45-160000.12.1
libGraphicsMagick++-devel-1.3.45-160000.12.1
libGraphicsMagick-Q16-3-1.3.45-160000.12.1
libGraphicsMagick3-config-1.3.45-160000.12.1
libGraphicsMagickWand-Q16-2-1.3.45-160000.12.1
perl-GraphicsMagick-1.3.45-160000.12.1

Ссылки

Описание

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.

Затронутые продукты
openSUSE Leap 16.0:GraphicsMagick-1.3.45-160000.12.1
openSUSE Leap 16.0:GraphicsMagick-devel-1.3.45-160000.12.1
openSUSE Leap 16.0:libGraphicsMagick++-Q16-12-1.3.45-160000.12.1
openSUSE Leap 16.0:libGraphicsMagick++-devel-1.3.45-160000.12.1
Ссылки
Уязвимость openSUSE-SU-2026:21553-1