SUSE-SU-2026:3192-1
Vulnerability from csaf_suse - Published: 2026-07-22 14:26 - Updated: 2026-07-22 14:26Summary
Security update for ImageMagick
Severity
Moderate
Notes
Title of the patch: Security update for ImageMagick
Description of the patch: This update for ImageMagick fixes the following issues
- CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
- CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in
`OpenPixelCache` (bsc#1271100).
- CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
- CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
- CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
- CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
- CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
- CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
- CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
- CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
- CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
- CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
- CVE-2026-61872: memory leak in TIFF encoder when invalid `tiff:tile-geometry` is specified (bsc#1271484).
Patchnames: SUSE-2026-3192,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3192
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
References
57 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ImageMagick",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ImageMagick fixes the following issues\n\n- CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).\n- CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in\n `OpenPixelCache` (bsc#1271100).\n- CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).\n- CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).\n- CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).\n- CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).\n- CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).\n- CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).\n- CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).\n- CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).\n- CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).\n- CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).\n- CVE-2026-61872: memory leak in TIFF encoder when invalid `tiff:tile-geometry` is specified (bsc#1271484).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-3192,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3192",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3192-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:3192-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263192-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:3192-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027773.html"
},
{
"category": "self",
"summary": "SUSE Bug 1268640",
"url": "https://bugzilla.suse.com/1268640"
},
{
"category": "self",
"summary": "SUSE Bug 1270006",
"url": "https://bugzilla.suse.com/1270006"
},
{
"category": "self",
"summary": "SUSE Bug 1270081",
"url": "https://bugzilla.suse.com/1270081"
},
{
"category": "self",
"summary": "SUSE Bug 1271100",
"url": "https://bugzilla.suse.com/1271100"
},
{
"category": "self",
"summary": "SUSE Bug 1271293",
"url": "https://bugzilla.suse.com/1271293"
},
{
"category": "self",
"summary": "SUSE Bug 1271312",
"url": "https://bugzilla.suse.com/1271312"
},
{
"category": "self",
"summary": "SUSE Bug 1271315",
"url": "https://bugzilla.suse.com/1271315"
},
{
"category": "self",
"summary": "SUSE Bug 1271316",
"url": "https://bugzilla.suse.com/1271316"
},
{
"category": "self",
"summary": "SUSE Bug 1271484",
"url": "https://bugzilla.suse.com/1271484"
},
{
"category": "self",
"summary": "SUSE Bug 1271486",
"url": "https://bugzilla.suse.com/1271486"
},
{
"category": "self",
"summary": "SUSE Bug 1271487",
"url": "https://bugzilla.suse.com/1271487"
},
{
"category": "self",
"summary": "SUSE Bug 1271492",
"url": "https://bugzilla.suse.com/1271492"
},
{
"category": "self",
"summary": "SUSE Bug 1271493",
"url": "https://bugzilla.suse.com/1271493"
},
{
"category": "self",
"summary": "SUSE Bug 1271496",
"url": "https://bugzilla.suse.com/1271496"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-55628 page",
"url": "https://www.suse.com/security/cve/CVE-2026-55628/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56362 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56362/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56366 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56366/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56373 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56373/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56377 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56377/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61464 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61857 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61862 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61863 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61868 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61869 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61870 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61872 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61872/"
}
],
"title": "Security update for ImageMagick",
"tracking": {
"current_release_date": "2026-07-22T14:26:04Z",
"generator": {
"date": "2026-07-22T14:26:04Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:3192-1",
"initial_release_date": "2026-07-22T14:26:04Z",
"revision_history": [
{
"date": "2026-07-22T14:26:04Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "ImageMagick-6.8.8.1-71.264.1.aarch64",
"product_id": "ImageMagick-6.8.8.1-71.264.1.aarch64"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.aarch64",
"product_id": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.aarch64"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.aarch64",
"product_id": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.aarch64"
}
},
{
"category": "product_version",
"name": "ImageMagick-devel-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "ImageMagick-devel-6.8.8.1-71.264.1.aarch64",
"product_id": "ImageMagick-devel-6.8.8.1-71.264.1.aarch64"
}
},
{
"category": "product_version",
"name": "ImageMagick-extra-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "ImageMagick-extra-6.8.8.1-71.264.1.aarch64",
"product_id": "ImageMagick-extra-6.8.8.1-71.264.1.aarch64"
}
},
{
"category": "product_version",
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.aarch64",
"product_id": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.aarch64"
}
},
{
"category": "product_version",
"name": "libMagick++-devel-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "libMagick++-devel-6.8.8.1-71.264.1.aarch64",
"product_id": "libMagick++-devel-6.8.8.1-71.264.1.aarch64"
}
},
{
"category": "product_version",
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.aarch64",
"product_id": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.aarch64"
}
},
{
"category": "product_version",
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.aarch64",
"product_id": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.aarch64"
}
},
{
"category": "product_version",
"name": "perl-PerlMagick-6.8.8.1-71.264.1.aarch64",
"product": {
"name": "perl-PerlMagick-6.8.8.1-71.264.1.aarch64",
"product_id": "perl-PerlMagick-6.8.8.1-71.264.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-devel-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product": {
"name": "ImageMagick-devel-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product_id": "ImageMagick-devel-64bit-6.8.8.1-71.264.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libMagick++-6_Q16-3-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product": {
"name": "libMagick++-6_Q16-3-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product_id": "libMagick++-6_Q16-3-64bit-6.8.8.1-71.264.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libMagick++-devel-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product": {
"name": "libMagick++-devel-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product_id": "libMagick++-devel-64bit-6.8.8.1-71.264.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libMagickCore-6_Q16-1-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product": {
"name": "libMagickCore-6_Q16-1-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product_id": "libMagickCore-6_Q16-1-64bit-6.8.8.1-71.264.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libMagickWand-6_Q16-1-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product": {
"name": "libMagickWand-6_Q16-1-64bit-6.8.8.1-71.264.1.aarch64_ilp32",
"product_id": "libMagickWand-6_Q16-1-64bit-6.8.8.1-71.264.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-6.8.8.1-71.264.1.i586",
"product": {
"name": "ImageMagick-6.8.8.1-71.264.1.i586",
"product_id": "ImageMagick-6.8.8.1-71.264.1.i586"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.i586",
"product": {
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.i586",
"product_id": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.i586"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.i586",
"product": {
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.i586",
"product_id": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.i586"
}
},
{
"category": "product_version",
"name": "ImageMagick-devel-6.8.8.1-71.264.1.i586",
"product": {
"name": "ImageMagick-devel-6.8.8.1-71.264.1.i586",
"product_id": "ImageMagick-devel-6.8.8.1-71.264.1.i586"
}
},
{
"category": "product_version",
"name": "ImageMagick-extra-6.8.8.1-71.264.1.i586",
"product": {
"name": "ImageMagick-extra-6.8.8.1-71.264.1.i586",
"product_id": "ImageMagick-extra-6.8.8.1-71.264.1.i586"
}
},
{
"category": "product_version",
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.i586",
"product": {
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.i586",
"product_id": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.i586"
}
},
{
"category": "product_version",
"name": "libMagick++-devel-6.8.8.1-71.264.1.i586",
"product": {
"name": "libMagick++-devel-6.8.8.1-71.264.1.i586",
"product_id": "libMagick++-devel-6.8.8.1-71.264.1.i586"
}
},
{
"category": "product_version",
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.i586",
"product": {
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.i586",
"product_id": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.i586"
}
},
{
"category": "product_version",
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.i586",
"product": {
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.i586",
"product_id": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.i586"
}
},
{
"category": "product_version",
"name": "perl-PerlMagick-6.8.8.1-71.264.1.i586",
"product": {
"name": "perl-PerlMagick-6.8.8.1-71.264.1.i586",
"product_id": "perl-PerlMagick-6.8.8.1-71.264.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-doc-6.8.8.1-71.264.1.noarch",
"product": {
"name": "ImageMagick-doc-6.8.8.1-71.264.1.noarch",
"product_id": "ImageMagick-doc-6.8.8.1-71.264.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "ImageMagick-6.8.8.1-71.264.1.ppc64le",
"product_id": "ImageMagick-6.8.8.1-71.264.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.ppc64le",
"product_id": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.ppc64le",
"product_id": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ImageMagick-devel-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "ImageMagick-devel-6.8.8.1-71.264.1.ppc64le",
"product_id": "ImageMagick-devel-6.8.8.1-71.264.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ImageMagick-extra-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "ImageMagick-extra-6.8.8.1-71.264.1.ppc64le",
"product_id": "ImageMagick-extra-6.8.8.1-71.264.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.ppc64le",
"product_id": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libMagick++-devel-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "libMagick++-devel-6.8.8.1-71.264.1.ppc64le",
"product_id": "libMagick++-devel-6.8.8.1-71.264.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.ppc64le",
"product_id": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.ppc64le",
"product_id": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.ppc64le"
}
},
{
"category": "product_version",
"name": "perl-PerlMagick-6.8.8.1-71.264.1.ppc64le",
"product": {
"name": "perl-PerlMagick-6.8.8.1-71.264.1.ppc64le",
"product_id": "perl-PerlMagick-6.8.8.1-71.264.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-6.8.8.1-71.264.1.s390",
"product": {
"name": "ImageMagick-6.8.8.1-71.264.1.s390",
"product_id": "ImageMagick-6.8.8.1-71.264.1.s390"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.s390",
"product": {
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.s390",
"product_id": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.s390"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.s390",
"product": {
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.s390",
"product_id": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.s390"
}
},
{
"category": "product_version",
"name": "ImageMagick-devel-6.8.8.1-71.264.1.s390",
"product": {
"name": "ImageMagick-devel-6.8.8.1-71.264.1.s390",
"product_id": "ImageMagick-devel-6.8.8.1-71.264.1.s390"
}
},
{
"category": "product_version",
"name": "ImageMagick-extra-6.8.8.1-71.264.1.s390",
"product": {
"name": "ImageMagick-extra-6.8.8.1-71.264.1.s390",
"product_id": "ImageMagick-extra-6.8.8.1-71.264.1.s390"
}
},
{
"category": "product_version",
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.s390",
"product": {
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.s390",
"product_id": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.s390"
}
},
{
"category": "product_version",
"name": "libMagick++-devel-6.8.8.1-71.264.1.s390",
"product": {
"name": "libMagick++-devel-6.8.8.1-71.264.1.s390",
"product_id": "libMagick++-devel-6.8.8.1-71.264.1.s390"
}
},
{
"category": "product_version",
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.s390",
"product": {
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.s390",
"product_id": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.s390"
}
},
{
"category": "product_version",
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.s390",
"product": {
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.s390",
"product_id": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.s390"
}
},
{
"category": "product_version",
"name": "perl-PerlMagick-6.8.8.1-71.264.1.s390",
"product": {
"name": "perl-PerlMagick-6.8.8.1-71.264.1.s390",
"product_id": "perl-PerlMagick-6.8.8.1-71.264.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-6.8.8.1-71.264.1.s390x",
"product": {
"name": "ImageMagick-6.8.8.1-71.264.1.s390x",
"product_id": "ImageMagick-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.s390x",
"product": {
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.s390x",
"product_id": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.s390x",
"product": {
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.s390x",
"product_id": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "ImageMagick-devel-6.8.8.1-71.264.1.s390x",
"product": {
"name": "ImageMagick-devel-6.8.8.1-71.264.1.s390x",
"product_id": "ImageMagick-devel-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "ImageMagick-devel-32bit-6.8.8.1-71.264.1.s390x",
"product": {
"name": "ImageMagick-devel-32bit-6.8.8.1-71.264.1.s390x",
"product_id": "ImageMagick-devel-32bit-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "ImageMagick-extra-6.8.8.1-71.264.1.s390x",
"product": {
"name": "ImageMagick-extra-6.8.8.1-71.264.1.s390x",
"product_id": "ImageMagick-extra-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.s390x",
"product": {
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.s390x",
"product_id": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "libMagick++-6_Q16-3-32bit-6.8.8.1-71.264.1.s390x",
"product": {
"name": "libMagick++-6_Q16-3-32bit-6.8.8.1-71.264.1.s390x",
"product_id": "libMagick++-6_Q16-3-32bit-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "libMagick++-devel-6.8.8.1-71.264.1.s390x",
"product": {
"name": "libMagick++-devel-6.8.8.1-71.264.1.s390x",
"product_id": "libMagick++-devel-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "libMagick++-devel-32bit-6.8.8.1-71.264.1.s390x",
"product": {
"name": "libMagick++-devel-32bit-6.8.8.1-71.264.1.s390x",
"product_id": "libMagick++-devel-32bit-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.s390x",
"product": {
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.s390x",
"product_id": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "libMagickCore-6_Q16-1-32bit-6.8.8.1-71.264.1.s390x",
"product": {
"name": "libMagickCore-6_Q16-1-32bit-6.8.8.1-71.264.1.s390x",
"product_id": "libMagickCore-6_Q16-1-32bit-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.s390x",
"product": {
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.s390x",
"product_id": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "libMagickWand-6_Q16-1-32bit-6.8.8.1-71.264.1.s390x",
"product": {
"name": "libMagickWand-6_Q16-1-32bit-6.8.8.1-71.264.1.s390x",
"product_id": "libMagickWand-6_Q16-1-32bit-6.8.8.1-71.264.1.s390x"
}
},
{
"category": "product_version",
"name": "perl-PerlMagick-6.8.8.1-71.264.1.s390x",
"product": {
"name": "perl-PerlMagick-6.8.8.1-71.264.1.s390x",
"product_id": "perl-PerlMagick-6.8.8.1-71.264.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "ImageMagick-6.8.8.1-71.264.1.x86_64",
"product_id": "ImageMagick-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"product_id": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"product_id": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"product_id": "ImageMagick-devel-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "ImageMagick-devel-32bit-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "ImageMagick-devel-32bit-6.8.8.1-71.264.1.x86_64",
"product_id": "ImageMagick-devel-32bit-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "ImageMagick-extra-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "ImageMagick-extra-6.8.8.1-71.264.1.x86_64",
"product_id": "ImageMagick-extra-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.x86_64",
"product_id": "libMagick++-6_Q16-3-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "libMagick++-6_Q16-3-32bit-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "libMagick++-6_Q16-3-32bit-6.8.8.1-71.264.1.x86_64",
"product_id": "libMagick++-6_Q16-3-32bit-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"product_id": "libMagick++-devel-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "libMagick++-devel-32bit-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "libMagick++-devel-32bit-6.8.8.1-71.264.1.x86_64",
"product_id": "libMagick++-devel-32bit-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"product_id": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "libMagickCore-6_Q16-1-32bit-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "libMagickCore-6_Q16-1-32bit-6.8.8.1-71.264.1.x86_64",
"product_id": "libMagickCore-6_Q16-1-32bit-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"product_id": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "libMagickWand-6_Q16-1-32bit-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "libMagickWand-6_Q16-1-32bit-6.8.8.1-71.264.1.x86_64",
"product_id": "libMagickWand-6_Q16-1-32bit-6.8.8.1-71.264.1.x86_64"
}
},
{
"category": "product_version",
"name": "perl-PerlMagick-6.8.8.1-71.264.1.x86_64",
"product": {
"name": "perl-PerlMagick-6.8.8.1-71.264.1.x86_64",
"product_id": "perl-PerlMagick-6.8.8.1-71.264.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64"
},
"product_reference": "ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64"
},
"product_reference": "ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ImageMagick-devel-6.8.8.1-71.264.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64"
},
"product_reference": "ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libMagick++-devel-6.8.8.1-71.264.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64"
},
"product_reference": "libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64"
},
"product_reference": "libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
},
"product_reference": "libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-55628",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-55628"
}
],
"notes": [
{
"category": "general",
"text": "In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-55628",
"url": "https://www.suse.com/security/cve/CVE-2026-55628"
},
{
"category": "external",
"summary": "SUSE Bug 1270081 for CVE-2026-55628",
"url": "https://bugzilla.suse.com/1270081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "moderate"
}
],
"title": "CVE-2026-55628"
},
{
"cve": "CVE-2026-56362",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56362"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56362",
"url": "https://www.suse.com/security/cve/CVE-2026-56362"
},
{
"category": "external",
"summary": "SUSE Bug 1271100 for CVE-2026-56362",
"url": "https://bugzilla.suse.com/1271100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "low"
}
],
"title": "CVE-2026-56362"
},
{
"cve": "CVE-2026-56366",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56366"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56366",
"url": "https://www.suse.com/security/cve/CVE-2026-56366"
},
{
"category": "external",
"summary": "SUSE Bug 1271316 for CVE-2026-56366",
"url": "https://bugzilla.suse.com/1271316"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "low"
}
],
"title": "CVE-2026-56366"
},
{
"cve": "CVE-2026-56373",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56373"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56373",
"url": "https://www.suse.com/security/cve/CVE-2026-56373"
},
{
"category": "external",
"summary": "SUSE Bug 1271315 for CVE-2026-56373",
"url": "https://bugzilla.suse.com/1271315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "moderate"
}
],
"title": "CVE-2026-56373"
},
{
"cve": "CVE-2026-56377",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56377"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56377",
"url": "https://www.suse.com/security/cve/CVE-2026-56377"
},
{
"category": "external",
"summary": "SUSE Bug 1270006 for CVE-2026-56377",
"url": "https://bugzilla.suse.com/1270006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "moderate"
}
],
"title": "CVE-2026-56377"
},
{
"cve": "CVE-2026-61464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61464"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61464",
"url": "https://www.suse.com/security/cve/CVE-2026-61464"
},
{
"category": "external",
"summary": "SUSE Bug 1271496 for CVE-2026-61464",
"url": "https://bugzilla.suse.com/1271496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 1.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "low"
}
],
"title": "CVE-2026-61464"
},
{
"cve": "CVE-2026-61857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61857"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61857",
"url": "https://www.suse.com/security/cve/CVE-2026-61857"
},
{
"category": "external",
"summary": "SUSE Bug 1271312 for CVE-2026-61857",
"url": "https://bugzilla.suse.com/1271312"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "moderate"
}
],
"title": "CVE-2026-61857"
},
{
"cve": "CVE-2026-61862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61862"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printed (read past the profile boundary). This behavior occurs when debug output is enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61862",
"url": "https://www.suse.com/security/cve/CVE-2026-61862"
},
{
"category": "external",
"summary": "SUSE Bug 1271493 for CVE-2026-61862",
"url": "https://bugzilla.suse.com/1271493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "low"
}
],
"title": "CVE-2026-61862"
},
{
"cve": "CVE-2026-61863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61863"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61863",
"url": "https://www.suse.com/security/cve/CVE-2026-61863"
},
{
"category": "external",
"summary": "SUSE Bug 1271492 for CVE-2026-61863",
"url": "https://bugzilla.suse.com/1271492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "low"
}
],
"title": "CVE-2026-61863"
},
{
"cve": "CVE-2026-61868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61868"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder that occurs when opening of the blob fails. Repeated triggering can lead to resource exhaustion (denial of service).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61868",
"url": "https://www.suse.com/security/cve/CVE-2026-61868"
},
{
"category": "external",
"summary": "SUSE Bug 1271487 for CVE-2026-61868",
"url": "https://bugzilla.suse.com/1271487"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "moderate"
}
],
"title": "CVE-2026-61868"
},
{
"cve": "CVE-2026-61869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61869"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, which can lead to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61869",
"url": "https://www.suse.com/security/cve/CVE-2026-61869"
},
{
"category": "external",
"summary": "SUSE Bug 1271486 for CVE-2026-61869",
"url": "https://bugzilla.suse.com/1271486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "low"
}
],
"title": "CVE-2026-61869"
},
{
"cve": "CVE-2026-61870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61870"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61870",
"url": "https://www.suse.com/security/cve/CVE-2026-61870"
},
{
"category": "external",
"summary": "SUSE Bug 1271293 for CVE-2026-61870",
"url": "https://bugzilla.suse.com/1271293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "low"
}
],
"title": "CVE-2026-61870"
},
{
"cve": "CVE-2026-61872",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61872"
}
],
"notes": [
{
"category": "general",
"text": "ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not to be released, which can lead to increased memory consumption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61872",
"url": "https://www.suse.com/security/cve/CVE-2026-61872"
},
{
"category": "external",
"summary": "SUSE Bug 1271484 for CVE-2026-61872",
"url": "https://bugzilla.suse.com/1271484"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-SUSE-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-config-6-upstream-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ImageMagick-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagick++-devel-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickCore-6_Q16-1-6.8.8.1-71.264.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libMagickWand-6_Q16-1-6.8.8.1-71.264.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T14:26:04Z",
"details": "low"
}
],
"title": "CVE-2026-61872"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…