Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

openSUSE Leap 16.0 ImageMagick Important Security Update 2026-20606-1

opensuse
Calendar Grey April 23, 2026
Dist Opensuse Esm H88
OpenSUSE releases critical updates addressing 16 security issues in ImageMagick to enhance system reliability.
An update that solves 16 vulnerabilities and has 16 bug fixes can now be installed.

Description

This update for ImageMagick fixes the following issues:

- CVE-2026-32259: stack out-of-bounds write due to a memory allocation failure in the sixel encoder can lead to a crash

(bsc#1259612).

- CVE-2026-32636: out-of-bounds write of a single zero byte due to bug the `NewXMLTree` method can lead to denial of

service (bsc#1259872).

- CVE-2026-33535: out-of-bounds write of a zero byte in X11 `display` interaction path can lead to a crash

(bsc#1260874).

- CVE-2026-33536: stack out-of-bounds write due to incorrect return value on certain platforms can lead to a denial of

service (bsc#1260879).

- CVE-2026-33899: out-of-bounds write of single zero byte in XML parsing can lead to a denial of service (bsc#1262154).

- CVE-2026-33900: heap out-of-bounds write due to integer truncation in viff encoder can lead to a crash (bsc#1262156).

- CVE-2026-33901: heap buffer overflow in the MVG decoder can lead to memory corruption or a crash (bsc#1262155).

- CVE-2026-33902: stack buffer overflow...

Read the Full Advisory

Patch

Package List

- openSUSE Leap 16.0:

ImageMagick-7.1.2.0-160000.8.1

ImageMagick-config-7-SUSE-7.1.2.0-160000.8.1

ImageMagick-config-7-upstream-limited-7.1.2.0-160000.8.1

ImageMagick-config-7-upstream-open-7.1.2.0-160000.8.1

ImageMagick-config-7-upstream-secure-7.1.2.0-160000.8.1

ImageMagick-config-7-upstream-websafe-7.1.2.0-160000.8.1

ImageMagick-devel-7.1.2.0-160000.8.1

ImageMagick-doc-7.1.2.0-160000.8.1

ImageMagick-extra-7.1.2.0-160000.8.1

libMagick++-7_Q16HDRI5-7.1.2.0-160000.8.1

libMagick++-devel-7.1.2.0-160000.8.1

libMagickCore-7_Q16HDRI10-7.1.2.0-160000.8.1

libMagickWand-7_Q16HDRI10-7.1.2.0-160000.8.1

perl-PerlMagick-7.1.2.0-160000.8.1

References

* bsc#1259612

* bsc#1259872

* bsc#1260874

* bsc#1260879

* bsc#1262097

* bsc#1262145

* bsc#1262146

* bsc#1262147

* bsc#1262148

* bsc#1262149

* bsc#1262150

* bsc#1262152

* bsc#1262153

* bsc#1262154

* bsc#1262155

* bsc#1262156

References:

* https://www.suse.com/security/cve/CVE-2026-32259.html

* https://www.suse.com/security/cve/CVE-2026-32636.html

* https://www.suse.com/security/cve/CVE-2026-33535.html

* https://www.suse.com/security/cve/CVE-2026-33536.html

* https://www.suse.com/security/cve/CVE-2026-33899.html

* https://www.suse.com/security/cve/CVE-2026-33900.html

* https://www.suse.com/security/cve/CVE-2026-33901.html

* https://www.suse.com/security/cve/CVE-2026-33902.html

* https://www.suse.com/security/cve/CVE-2026-33905.html

* https://www.suse.com/security/cve/CVE-2026-33908.html

* https://www.suse.com/security/cve/CVE-2026-34238.html

* https://www.suse.com/security/cve/CVE-2026-40169.html

* https://www.suse.com/security/cve/CVE-2026-40183.html

* https://www.suse.com/security/cve/CVE-2026-40310.html

*...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:20606-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here