SUSE-SU-2026:0061-1

Details

This update for ImageMagick fixes the following issues:

CVE-2025-68618: read a malicious SVG file may result in a DoS attack (bsc#1255821).
CVE-2025-68950: check for circular references in mvg files may lead to stack overflow (bsc#1255822).
CVE-2025-69204: an integer overflow can lead to a DoS attack (bsc#1255823).

Affected Packages(19 packages)

ImageMagick

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

ImageMagick-config-7-SUSE

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

ImageMagick-config-7-upstream-limited

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

ImageMagick-config-7-upstream-open

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

ImageMagick-config-7-upstream-secure

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

ImageMagick-config-7-upstream-websafe

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

ImageMagick-devel

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

ImageMagick-devel-32bit

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

ImageMagick-doc

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

ImageMagick-extra

openSUSE Leap 15.6

Fixed in:

7.1.1.21-150600.3.35.1

References

REPORThttps://bugzilla.suse.com/1255821 REPORThttps://bugzilla.suse.com/1255822 REPORThttps://bugzilla.suse.com/1255823 WEBhttps://www.suse.com/security/cve/CVE-2025-68618 WEBhttps://www.suse.com/security/cve/CVE-2025-68950 WEBhttps://www.suse.com/security/cve/CVE-2025-69204 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-20260061-1/

SUSE-SU-2026:0061-1

Details

Affected Packages(19 packages)

References

Upstream

Related

Ecosystems

Timeline