Description of the patch:
This update for ImageMagick fixes the following issues
- CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048).
- CVE-2026-42326: information disclosure via malicious IPTC input file (bsc#1268092).
- CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder (bsc#1268094).
- CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta
encoder (bsc#1268102).
- CVE-2026-45624: data exposure due to image processing vulnerability (bsc#1268096).
- CVE-2026-45664: denial of Service due to excessive resource use in MNG coder (bsc#1268101).
- CVE-2026-46520: denial of Service via out-of-bounds write when processing multiple images (bsc#1268112).
- CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder
(bsc#1268124).
- CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder (bsc#1268126).
- CVE-2026-46523: heap-use-after-free via a crafted MSL image (bsc#1268125).
- CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-
cache service (bsc#1268120).
- CVE-2026-46693: file descriptor hijacking in the server process when a race condition is met via an attacker who can
connect to a magick -distribute-cache service (bsc#1268117).
- CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge--response
authentication model (bsc#1268114).
- CVE-2026-47166: heap buffer over-read in the server process via an attacker who can connect to a magick -distribute-
cache service (bsc#1268113).
- CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems
(bsc#1268111).
- CVE-2026-49218: denial of service due to a missing check in the DCM decoder (bsc#1268110).
- CVE-2026-53460: out-of-Memory condition due to a...