CVE-2026-55628

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-26he, the -concatenate operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.

The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-26he, the -concatenate operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.

Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53466)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap information disclosure vulnerability because part of the pixels are left unchanged. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53467)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55510)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55577)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55594)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the connected-components option an infinite loop will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55595)

In versions prior to 7.1.2-26he, the -concatenate operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.(CVE-2026-55628)

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.

Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53466)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap information disclosure vulnerability because part of the pixels are left unchanged. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53467)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55510)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55577)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55594)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the connected-components option an infinite loop will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55595)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26.(CVE-2026-55597)

In versions prior to 7.1.2-26he, the -concatenate operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.(CVE-2026-55628)

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.

Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53466)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap information disclosure vulnerability because part of the pixels are left unchanged. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53467)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55510)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55577)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55594)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the connected-components option an infinite loop will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55595)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26.(CVE-2026-55597)

In versions prior to 7.1.2-26he, the -concatenate operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.(CVE-2026-55628)

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.

Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53466)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap information disclosure vulnerability because part of the pixels are left unchanged. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53467)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55510)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55577)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55594)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the connected-components option an infinite loop will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55595)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26.(CVE-2026-55597)

In versions prior to 7.1.2-26he, the -concatenate operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.(CVE-2026-55628)

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-26he, the -concatenate operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.

• CVE-2026-105081: deny dangling/looping symlinks in path policy checks
• CVE-2026-105403: check the coder policy against the coder actually used (also CVE-2026-106579)
• CVE-2026-105404: escape labels written into PostScript/PDF output
• CVE-2026-105823: apply the path policy to CUT palette files (also CVE-2026-106580)
• CVE-2026-106566: honour MAGICK_SHRED_PASSES when deciding on unique symlinks
• CVE-2026-55628: apply the path policy to convert -concatenate inputs and output

• CVE-2026-105081: deny dangling/looping symlinks in path policy checks
• CVE-2026-105403: check the coder policy against the coder actually used (also CVE-2026-106579)
• CVE-2026-105404: escape labels written into PostScript/PDF output
• CVE-2026-105823: apply the path policy to CUT palette files (also CVE-2026-106580)
• CVE-2026-106566: honour MAGICK_SHRED_PASSES when deciding on unique symlinks
• CVE-2026-55628: apply the path policy to convert -concatenate inputs and output

• CVE-2026-105081: deny dangling/looping symlinks in path policy checks
• CVE-2026-105403: check the coder policy against the coder actually used (also CVE-2026-106579)
• CVE-2026-105404: escape labels written into PostScript/PDF output
• CVE-2026-105823: apply the path policy to CUT palette files (also CVE-2026-106580)
• CVE-2026-106566: honour MAGICK_SHRED_PASSES when deciding on unique symlinks
• CVE-2026-55628: apply the path policy to convert -concatenate inputs and output

The updated packages fix numerous security vulnerabilities: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797. (CVE-2026-25797) Heap Buffer Underwrite in Floyd-Steinberg depth dithering. (CVE-2026-48724) Infinite Loop in subimage-search with crafted image. (CVE-2026-48733) Stack Overflow in MVG decoder. (CVE-2026-48734) Policy Bypass in DCM decoder could result in image with invalid dimensions. (CVE-2026-49218) Policy Bypass can read disallowed files. (CVE-2026-49219) Heap Buffer Over-Write in MAT decoder on 32-bit systems. (CVE-2026-48994) Policy Bypass can trigger out-of-Memory condition. (CVE-2026-53460) Heap Buffer Over-Write in ICON decoder due to incorrect loop. (CVE-2026-53461) Use-After-Free when allocation in CheckPrimitiveExtent fails. (CVE-2026-53462) Null Pointer Dereference in distort operation when passing incorrect arguments. (CVE-2026-53463) Memory Leak in wand option parser when providing invalid arguments. (CVE-2026-53464) Heap Buffer Over-Write in SF3 encoder when writing multi-frame image. (CVE-2026-53465) Heap Buffer Over-Read in XCF decoder due to integer conversion overflow. (CVE-2026-53466) Information Disclosure in MNG decoder because allocated memory is left unchanged. (CVE-2026-53467) Use-After-Free in crafted 8BIM when identifying an image. (CVE-2026-55510) Heap Buffer Overflow in ImageMagick MVG decoder. (CVE-2026-55577) Stack Overflow in MVG decoder due to missing depth check. (CVE-2026-55594) Infinite Loop in connected-components when providing invalid arguments. (CVE-2026-55595) Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments. (CVE-2026-55597) Policy Bypass in concatenate operation due to missing checks. (CVE-2026-55628)

These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed.

This update for ImageMagick fixes the following issues

• CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081).
• CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
• CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
• CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
• CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
• CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006).
• CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313).
• CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312).
• CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
• CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory allocation fails (bsc#1271294).
• CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).

Root has patched CVE-2026-55628 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available.

This update for ImageMagick fixes the following issues

• CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081).
• CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
• CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
• CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
• CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
• CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006).
• CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313).
• CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312).
• CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
• CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory allocation fails (bsc#1271294).
• CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).

This update for ImageMagick fixes the following issues

• CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
• CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
• CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
• CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
• CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
• CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
• CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
• CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
• CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
• CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
• CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
• CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
• CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).

This update for ImageMagick fixes the following issues

• CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
• CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
• CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
• CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
• CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
• CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
• CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
• CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
• CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
• CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
• CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
• CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
• CVE-2026-61861: use-after-free in FormatMagickCaption when memory allocation fails (bsc#1271294).
• CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
• CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
• CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
• CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
• CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
• CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
• CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
• CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
• CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
• CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).

This update for ImageMagick fixes the following issues

• CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
• CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
• CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
• CVE-2026-61860: use-after-free when freetype initialization fails (bsc#1271494).
• CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
• CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
• CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
• CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
• CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
• CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
• CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
• CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
• CVE-2026-61871: memory leak in ICON decoder when allocation fails (bsc#1271485).
• CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
• CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
• CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
• CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
• CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
• CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
• CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
• CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
• CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
• CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
• CVE-2026-61861: use-after-free in FormatMagickCaption when memory allocation fails (bsc#1271294).
• CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).

This update for ImageMagick fixes the following issues:

• CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
• CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
• CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
• CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
• CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
• CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
• CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
• CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
• CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
• CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
• CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
• CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
• CVE-2026-61860: use-after-free when freetype initialization fails (bsc#1271494).
• CVE-2026-61861: use-after-free in FormatMagickCaption when memory allocation fails (bsc#1271294).
• CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
• CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
• CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
• CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
• CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
• CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
• CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
• CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
• CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
• CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
• Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).