Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

SUSE ImageMagick Major Memory Leak and Command Injection Flaw 2026-22861-1

suse
Calendar Grey July 27, 2026
Scroller Suse
SUSE updates ImageMagick to fix 15 vulnerabilities including command injection and memory leaks; installation recommended.
A security update for ImageMagick addresses 15 vulnerabilities, including memory leaks and arbitrary command injections, applicable to SUSE Linux Enterprise Server 16.0 and SAP app...

Summary

## This update for ImageMagick fixes the following issues * CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails (bsc#1271495). * CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878). * CVE-2026-61464: Heap Buffer Over-Write in X11 import with crafted window title (bsc#1271496). * CVE-2026-61859: Policy Bypass in script operation due to missing checks (bsc#1271497). * CVE-2026-61860: Use-After-Free when freetype initialization fails (bsc#1271494). * CVE-2026-61862: Information Disclosure when printing profiles with debug enabled (bsc#1271493). * CVE-2026-61863: Memory Leak in TIFF encoder when a temporary file could not be created (bsc#1271492).

Topics%20covered

Topics Covered

security advisory SuSE important memory leak imagemagick arbitrary command injection

References

* bsc#1268878

* bsc#1271484

* bsc#1271485

* bsc#1271486

* bsc#1271487

* bsc#1271488

* bsc#1271489

* bsc#1271490

* bsc#1271491

* bsc#1271492

* bsc#1271493

* bsc#1271494

* bsc#1271495

* bsc#1271496

* bsc#1271497

Cross-

* CVE-2026-56375

* CVE-2026-56379

* CVE-2026-61464

* CVE-2026-61859

* CVE-2026-61860

* CVE-2026-61862

* CVE-2026-61863

* CVE-2026-61864

* CVE-2026-61865

* CVE-2026-61866

* CVE-2026-61867

* CVE-2026-61868

* CVE-2026-61869

* CVE-2026-61871

* CVE-2026-61872

CVSS scores:

* CVE-2026-56375 ( SUSE ): 4.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2026-56375 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

* CVE-2026-56375 ( NVD ): 4.8

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:22861-1
Release Date: 2026-07-22T19:01:21Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE important memory leak imagemagick arbitrary command injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.