SUSE-SU-2026:0384-1

Details

This update for ImageMagick fixes the following issues:

CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).

Affected Packages

ImageMagick

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

6.8.8.1-71.227.1

ImageMagick-config-6-SUSE

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

6.8.8.1-71.227.1

ImageMagick-config-6-upstream

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

6.8.8.1-71.227.1

ImageMagick-devel

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

6.8.8.1-71.227.1

libMagick++-devel

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

6.8.8.1-71.227.1

libMagickCore-6_Q16-1

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

6.8.8.1-71.227.1

libMagickWand-6_Q16-1

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

6.8.8.1-71.227.1

References