Linux · openSUSE Leap · Security advisory · July 22, 2026

OPENSUSE-SU-2026:21426-1: ImageMagick security update

OPENSUSE-SU-2026:21426-1, released July 22, 2026, fixes 15 CVEs in ImageMagick (version 7.1.2.0-160000.13.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
15
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0164
76th percentile

Priority of the 15 CVEs

Patch now 0 Urgent 0 High 2 Routine 13

Fixed package versions

ProductReleaseFixed in
ImageMagickopensuse-leap 16.07.1.2.0-160000.13.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-61863 imagemagick: ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a...7.5 0.0019 None reported
High CVE-2026-61866 imagemagick: ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened7.5 0.0019 None reported
Routine CVE-2026-56379 imagemagick: ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows a...n/a 0.0164 None reported
Routine CVE-2026-61860 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initializ...n/a 0.0035 None reported
Routine CVE-2026-61871 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory alloca...n/a 0.0035 None reported
Routine CVE-2026-61868 imagemagick: ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder that occurs when ope...n/a 0.0022 None reported
Routine CVE-2026-61859 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script opera...n/a 0.0017 None reported
Routine CVE-2026-56375 imagemagick: ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action failsn/a 0.0015 None reported
Routine CVE-2026-61867 imagemagick: ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation failsn/a 0.0014 None reported
Routine CVE-2026-61862 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is display...n/a 0.0011 None reported
Routine CVE-2026-61864 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when...n/a 0.0010 None reported
Routine CVE-2026-61865 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation: when a specific operat...n/a 0.0010 None reported
Routine CVE-2026-61869 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory alloca...n/a 0.0010 None reported
Routine CVE-2026-61872 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geomet...n/a 0.0010 None reported
Routine CVE-2026-61464 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when runn...n/a 0.0009 None reported
Showing 1 to 15 of 15 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.