Linux · openSUSE Leap · Security advisory · March 20, 2026

OPENSUSE-SU-2026:20405-1: ImageMagick security update

OPENSUSE-SU-2026:20405-1, released March 20, 2026, fixes 18 CVEs in ImageMagick (version 7.1.2.0-160000.7.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
18
None rated Critical
Exploited
0
None reported
Highest CVSS
8.1
Base score, 0 to 10
Highest EPSS
0.0046
39th percentile

Priority of the 18 CVEs

Patch now 0 Urgent 0 High 6 Routine 12

Fixed package versions

ProductReleaseFixed in
ImageMagickopensuse-leap 16.07.1.2.0-160000.7.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-28691 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...7.5 0.0041 None reported
High CVE-2026-28693 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...8.1 0.0038 None reported
High CVE-2026-30883 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...7.8 0.0014 None reported
High CVE-2026-28494 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...7.1 0.0013 None reported
High CVE-2026-30931 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images7.8 0.0012 None reported
High CVE-2026-30929 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...7.8 0.0012 None reported
Routine CVE-2026-24484 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images5.3 0.0046 None reported
Routine CVE-2026-28692 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...4.8 0.0029 None reported
Routine CVE-2026-28687 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...5.3 0.0028 None reported
Routine CVE-2026-28493 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...6.5 0.0023 None reported
Routine CVE-2026-28688 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images5.3 0.0022 None reported
Routine CVE-2026-28686 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...6.8 0.0013 None reported
Routine CVE-2026-30935 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-28493: integer overflow in the SIXEL decoder lead...4.4 0.0013 None reported
Routine CVE-2026-30936 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images5.5 0.0012 None reported
Routine CVE-2026-28689 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...6.3 0.0012 None reported
Routine CVE-2026-28690 ImageMagick: This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested M...6.5 0.0012 None reported
Routine CVE-2026-30937 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images6.1 0.0012 None reported
Routine CVE-2026-31853 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images5.5 0.0011 None reported
Showing 1 to 18 of 18 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.