< back to search

shield Security update for imagemagick
SUSE-SLES-16.0-1300

This update for ImageMagick fixes the following issues - CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100). - CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316). - CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314). - CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315). - CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006). - CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313). - CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312). - CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311). - CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory allocation fails (bsc#1271294). - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64
SUSE Linux Enterprise Server 16.0 ppc64le
SUSE Linux Enterprise Server 16.0 s390x
SUSE Linux Enterprise Server 16.0 x86_64
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64