Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 477
Alerts This Week
Warning Icon 1 477

openSUSE ImageMagick Critical Policy Bypass Heap Overflow Fix 2026-21391-1

opensuse
Calendar Grey July 23, 2026
Scroller Opensuse
ImageMagick update for openSUSE addresses 11 issues including heap overflows and policy bypass risks with patch instructions.
openSUSE has released a security update for ImageMagick addressing 11 vulnerabilities, including policy bypasses and memory issues, affecting openSUSE Leap 16.0

Description

This update for ImageMagick fixes the following issues

- CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081).

- CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).

- CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).

- CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).

- CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).

- CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006).

- CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313).

- CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312).

- CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311).

- CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate heap overflow imagemagick OpenSUSE policy bypass

Patch

Package List

- openSUSE Leap 16.0:

ImageMagick-7.1.2.0-160000.12.1

ImageMagick-config-7-SUSE-7.1.2.0-160000.12.1

ImageMagick-config-7-upstream-limited-7.1.2.0-160000.12.1

ImageMagick-config-7-upstream-open-7.1.2.0-160000.12.1

ImageMagick-config-7-upstream-secure-7.1.2.0-160000.12.1

ImageMagick-config-7-upstream-websafe-7.1.2.0-160000.12.1

ImageMagick-devel-7.1.2.0-160000.12.1

ImageMagick-doc-7.1.2.0-160000.12.1

ImageMagick-extra-7.1.2.0-160000.12.1

libMagick++-7_Q16HDRI5-7.1.2.0-160000.12.1

libMagick++-devel-7.1.2.0-160000.12.1

libMagickCore-7_Q16HDRI10-7.1.2.0-160000.12.1

libMagickWand-7_Q16HDRI10-7.1.2.0-160000.12.1

perl-PerlMagick-7.1.2.0-160000.12.1

References

* bsc#1268640

* bsc#1270006

* bsc#1270081

* bsc#1271100

* bsc#1271293

* bsc#1271294

* bsc#1271311

* bsc#1271312

* bsc#1271313

* bsc#1271314

* bsc#1271315

* bsc#1271316

References:

* https://www.suse.com/security/cve/CVE-2026-55628.html

* https://www.suse.com/security/cve/CVE-2026-56362.html

* https://www.suse.com/security/cve/CVE-2026-56366.html

* https://www.suse.com/security/cve/CVE-2026-56372.html

* https://www.suse.com/security/cve/CVE-2026-56373.html

* https://www.suse.com/security/cve/CVE-2026-56377.html

* https://www.suse.com/security/cve/CVE-2026-61465.html

* https://www.suse.com/security/cve/CVE-2026-61857.html

* https://www.suse.com/security/cve/CVE-2026-61858.html

* https://www.suse.com/security/cve/CVE-2026-61861.html

* https://www.suse.com/security/cve/CVE-2026-61870.html

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21391-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate heap overflow imagemagick OpenSUSE policy bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.