{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "imagemagick: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/imagemagick--imagemagick/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/imagemagick--imagemagick/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116160/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116160/",
   "title": "CVE-2026-116160 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, when a user runs an X11 animate operation on it, overwrites heap memory and can crash the application.",
   "date_published": "2026-10-25T13:20:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116159/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116159/",
   "title": "CVE-2026-116159 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision list) option, where allocated memory is not cleaned up after use. Attackers can supply input that causes the -cdl option to be processed, repeatedly leaking memory and degrading availability through resource exhaustion.",
   "date_published": "2026-10-25T13:20:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116158/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116158/",
   "title": "CVE-2026-116158 disclosed",
   "content_text": "ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated failed compare operations to exhaust memory and cause denial of service.",
   "date_published": "2026-10-25T13:20:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116157/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116157/",
   "title": "CVE-2026-116157 disclosed",
   "content_text": "ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through five affected PerlMagick code locations to exhaust memory and cause denial of service.",
   "date_published": "2026-10-25T13:20:03Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116156/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116156/",
   "title": "CVE-2026-116156 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of service.",
   "date_published": "2026-10-25T13:20:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116155/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116155/",
   "title": "CVE-2026-116155 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP profiles by various decoders. Attackers can supply images with a crafted XMP profile that leak memory each time they are processed, leading to resource exhaustion and denial of service.",
   "date_published": "2026-10-25T13:20:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116154/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116154/",
   "title": "CVE-2026-116154 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting depth limit. Attackers can supply crafted, deeply nested XML data to trigger the leak, causing memory exhaustion and denial of service.",
   "date_published": "2026-10-25T13:20:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116153/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116153/",
   "title": "CVE-2026-116153 disclosed",
   "content_text": "ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes or potential code execution.",
   "date_published": "2026-10-25T13:20:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116152/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116152/",
   "title": "CVE-2026-116152 disclosed",
   "content_text": "ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allocated memory in a specific error path. Attackers can supply crafted MAT files that trigger this error path repeatedly, causing small memory leaks that gradually consume process memory.",
   "date_published": "2026-10-25T13:20:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116151/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116151/",
   "title": "CVE-2026-116151 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to release allocated memory when processing a crafted image. Attackers can supply crafted images that are encoded to JNG to leak memory, potentially causing resource exhaustion and a limited denial of service.",
   "date_published": "2026-10-25T13:19:59Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116150/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116150/",
   "title": "CVE-2026-116150 disclosed",
   "content_text": "ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image. Attackers can submit crafted images for FPX encoding to leak memory repeatedly, causing resource exhaustion and denial of service.",
   "date_published": "2026-10-25T13:19:59Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116149/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116149/",
   "title": "CVE-2026-116149 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption.",
   "date_published": "2026-10-25T13:19:58Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116148/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116148/",
   "title": "CVE-2026-116148 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options before writing them into generated MVG output. Attackers who can supply drawing options can inject arbitrary MVG drawing commands into the resulting MVG file.",
   "date_published": "2026-10-25T13:19:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116147/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116147/",
   "title": "CVE-2026-116147 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the result of a memory allocation is not checked before use. Attackers can supply a DJVU image that, when processed under conditions where the allocation fails, crashes the process and causes a denial of service.",
   "date_published": "2026-10-25T13:19:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116146/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116146/",
   "title": "CVE-2026-116146 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to release allocated memory when processing a crafted MSL image. Attackers can supply crafted MSL files for processing to repeatedly leak memory, causing resource exhaustion and denial of service.",
   "date_published": "2026-10-25T13:19:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116145/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116145/",
   "title": "CVE-2026-116145 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j. An attacker able to supply input to ImageMagick can evade configured security policy restrictions, allowing operations the policy was intended to block.",
   "date_published": "2026-10-25T13:19:55Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116144/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116144/",
   "title": "CVE-2026-116144 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG file that, when read with specific arguments, exhausts the stack and crashes the process, causing a denial of service.",
   "date_published": "2026-10-25T13:19:55Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116143/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116143/",
   "title": "CVE-2026-116143 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene selection to be circumvented. Attackers supplying a specific argument can cause ImageMagick to process more scenes than permitted, potentially exhausting resources.",
   "date_published": "2026-10-25T13:19:54Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116142/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116142/",
   "title": "CVE-2026-116142 disclosed",
   "content_text": "ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted image that triggers the over-read during minimum-bounding-box output, causing crashes or exposing adjacent heap memory.",
   "date_published": "2026-10-25T13:19:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116141/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116141/",
   "title": "CVE-2026-116141 disclosed",
   "content_text": "ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade image width and height limits because extent checks occur after decoding. Attackers can supply crafted UHDR images with oversized dimensions that are fully decoded before policy limits are enforced, causing excessive resource consumption.",
   "date_published": "2026-10-25T13:19:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116140/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116140/",
   "title": "CVE-2026-116140 disclosed",
   "content_text": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and execute the blocked program.",
   "date_published": "2026-10-25T13:19:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109964/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109964/",
   "title": "CVE-2026-109964 disclosed",
   "content_text": "ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.",
   "date_published": "2026-10-13T13:35:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109964/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109964/",
   "title": "CVE-2026-109964 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: GraphicsMagick 1.3.49-1.1, ImageMagick 7.1.2.34-1.1.",
   "date_published": "2026-10-13T13:35:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109282/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109282/",
   "title": "CVE-2026-109282 disclosed",
   "content_text": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.",
   "date_published": "2026-10-12T16:04:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109281/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109281/",
   "title": "CVE-2026-109281 disclosed",
   "content_text": "ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap memory, potentially disclosing limited memory contents.",
   "date_published": "2026-10-12T16:04:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109280/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109280/",
   "title": "CVE-2026-109280 disclosed",
   "content_text": "ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory corruption.",
   "date_published": "2026-10-12T16:04:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109279/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109279/",
   "title": "CVE-2026-109279 disclosed",
   "content_text": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security policy access can crash the application, causing a denial of service.",
   "date_published": "2026-10-12T16:04:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 disclosed",
   "content_text": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. Attackers can repeatedly trigger wavelet-denoise processing under resource-constrained conditions to leak memory and degrade service availability.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: ImageMagick 7.1.2.34-1.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-module-for-desktop-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise Module for Desktop Applications 15 SP7",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise Server 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise Server 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise Server 15 SP6-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109278/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109278/",
   "title": "CVE-2026-109278 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 disclosed",
   "content_text": "ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: ImageMagick 7.1.2.34-1.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-module-for-desktop-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise Module for Desktop Applications 15 SP7",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise Server 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise Server 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise Server 15 SP6-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109277/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109277/",
   "title": "CVE-2026-109277 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 disclosed",
   "content_text": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and degrading availability.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: ImageMagick 7.1.2.34-1.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-module-for-desktop-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise Module for Desktop Applications 15 SP7",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise Server 12 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 6.8.8.1-71.280.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise Server 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise Server 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise Server 15 SP6-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109276/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109276/",
   "title": "CVE-2026-109276 fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
   "content_text": "Fixed versions: ImageMagick 6.8.8.1-71.280.1.",
   "date_published": "2026-10-12T16:04:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 disclosed",
   "content_text": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: ImageMagick 7.1.2.34-1.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-module-for-desktop-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise Module for Desktop Applications 15 SP7",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise Server 12 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 6.8.8.1-71.280.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise Server 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise Server 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise Server 15 SP6-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109275/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109275/",
   "title": "CVE-2026-109275 fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
   "content_text": "Fixed versions: ImageMagick 6.8.8.1-71.280.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 disclosed",
   "content_text": "ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during script execution to read files that the security policy is meant to block.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: ImageMagick 7.1.2.34-1.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-module-for-desktop-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise Module for Desktop Applications 15 SP7",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise Server 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise Server 15 SP5-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise Server 15 SP6-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109274/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109274/",
   "title": "CVE-2026-109274 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109273/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109273/",
   "title": "CVE-2026-109273 disclosed",
   "content_text": "ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents.",
   "date_published": "2026-10-12T16:04:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109273/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109273/",
   "title": "CVE-2026-109273 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: ImageMagick 7.1.2.34-1.1.",
   "date_published": "2026-10-12T16:04:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109273/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109273/",
   "title": "CVE-2026-109273 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109273/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109273/",
   "title": "CVE-2026-109273 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
   "content_text": "Fixed versions: ImageMagick 7.1.0.9-150400.6.122.1.",
   "date_published": "2026-10-12T16:04:39Z"
  }
 ]
}