Description of the patch:
This update for ImageMagick fixes the following issues
Security issues:
- CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).
- CVE-2026-42326: Information disclosure via malicious IPTC input file (bsc#1268092).
- CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder (bsc#1268094).
- CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta
encoder (bsc#1268102).
- CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value (bsc#1268095).
- CVE-2026-45624: Data exposure due to image processing vulnerability (bsc#1268096).
- CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder (bsc#1268101).
- CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images (bsc#1268112).
- CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder
(bsc#1268124).
- CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder (bsc#1268126).
- CVE-2026-46523: heap-use-after-free via a crafted MSL image (bsc#1268125).
- CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth
check (bsc#1268123).
- CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in
the JP2 (bsc#1268121).
- CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-
cache service (bsc#1268120).
- CVE-2026-46693: file descriptor hijacking in the server process when a race condition is met via an attacker who can
connect to a magick -distribute-cache service (bsc#1268117).
- CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge--response
authentication model (bsc#1268114).
- CVE-2026-47166: heap buffer...