## This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues * CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154). * CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156). * CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder (bsc#1262155). * CVE-2026-33908: Denial of Service via deeply nested XML file processing (bsc#1262152). * CVE-2026-34238: Denial of Service via integer overflow in despeckle operation (bsc#1262147). * CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write (bsc#1262150). * CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder (bsc#1262148).
* bsc#1262146
* bsc#1262147
* bsc#1262148
* bsc#1262150
* bsc#1262152
* bsc#1262154
* bsc#1262155
* bsc#1262156
* bsc#1265048
* bsc#1268092
* bsc#1268094
* bsc#1268095
* bsc#1268096
* bsc#1268101
* bsc#1268103
* bsc#1268105
* bsc#1268108
* bsc#1268110
* bsc#1268111
* bsc#1268112
* bsc#1268113
* bsc#1268114
* bsc#1268117
* bsc#1268120
* bsc#1268121
* bsc#1268122
* bsc#1268124
* bsc#1268125
* bsc#1268126
Cross-
* CVE-2026-33899
* CVE-2026-33900
* CVE-2026-33901
* CVE-2026-33908
* CVE-2026-34238
* CVE-2026-40169
* CVE-2026-40310
* CVE-2026-40311
* CVE-2026-42050
* CVE-2026-42326
* CVE-2026-45031
* CVE-2026-45359
* CVE-2026-45624
* CVE-2026-45664
* CVE-2026-46520
* CVE-2026-46521
* CVE-2026-46522
* CVE-2026-46523
* CVE-2026-46559
* CVE-2026-46692
* CVE-2026-46693
* CVE-2026-47165
* CVE-2026-47166
Get the latest Linux and open source security news straight to your inbox.