The update for ImageMagick fixes a range of security issues: CVE-2026-56375 addresses a possible memory leak in the ASHLAR coder when an action fails; CVE-2026-56379 patches an arbitrary MVG drawing command injection vulnerability via the SVG decoder when processing crafted SVG files; CVE-2026-61464 resolves a heap buffer over-write in X11 import triggered by crafted window titles; CVE-2026-61859 fixes a policy bypass in script operations due to missing checks; CVE-2026-61860 mitigates a use-after-free condition when freetype initialization fails; CVE-2026-61862 closes an information disclosure issue when printing profiles with debug enabled; and CVE-2026-61863 through CVE-2026-61872 address multiple memory leaks in various encoders and decoders triggered by allocation failures or invalid input. These collectively enhance the security posture of ImageMagick by preventing potential exploitation vectors related to memory management, command injection, and policy enforcement.

The vulnerabilities could lead to memory leaks causing resource exhaustion, arbitrary command injection allowing execution of unauthorized drawing commands, heap buffer over-write potentially causing crashes or code execution, policy bypass enabling unauthorized script operations, use-after-free leading to memory corruption, and information disclosure revealing sensitive profile data. These impacts could affect the confidentiality, integrity, and availability of systems using vulnerable versions of ImageMagick.

A security update is available that fixes all listed vulnerabilities. Users and administrators should apply the official ImageMagick update provided by the SUSE Product Security Team to remediate these issues. No additional mitigation steps are indicated beyond applying the update.