SUSE-SU-2026:2023-1

Details

Description of the patch:

This update for ImageMagick fixes the following issues

CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).

Affected Packages(12 packages)

ImageMagick

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

ImageMagick-config-7-SUSE

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

ImageMagick-config-7-upstream-limited

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

ImageMagick-config-7-upstream-open

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

ImageMagick-config-7-upstream-secure

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

ImageMagick-config-7-upstream-websafe

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

ImageMagick-devel

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

libMagick++-7_Q16HDRI5

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

libMagick++-devel

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

libMagickCore-7_Q16HDRI10

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.52.1

References

ADVISORY

https://bugzilla.suse.com/1259528

ADVISORY

https://bugzilla.suse.com/1265048

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-May/046632.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-31853/

ADVISORY

https://www.suse.com/security/cve/CVE-2026-42050/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20262023-1/