Description of the patch:
This update for ImageMagick fixes the following issues
- CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read
(bsc#1270073).
- CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure
(bsc#1270074).
- CVE-2026-55594: missing depth check in the MVG decoder will result in a stack overflow when a crafted image is
provided (bsc#1270077).
- CVE-2026-55595: providing invalid arguments to the
connected-components option can lead to an infinite loop
(bsc#1270079).
- CVE-2026-55597: incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder (bsc#1270080).
- CVE-2026-56361: off-by-one error in morphology validation can lead to an out-of-bounds read (bsc#1270001).
- CVE-2026-56363: integer overflow leading to a division by zero in binomial kernel processing can cause an application
crash (bsc#1270002).
- CVE-2026-56364: memory leak in
LoadOpenCLDeviceBenchmark function when parsing malformed OpenCL device profile XML
files with unclosed device elements (bsc#1270003).
- CVE-2026-56365: memory leak in PNG encoder when writing a MNG image (bsc#1270004).
- CVE-2026-56367: integer overflow in the PSB (PSD v2) RLE decoding path can lead to an heap out-of-bounds read
(bsc#1268645).
- CVE-2026-56368: improper memory management can lead to memory leak in multiple coders that write raw pixel data
(bsc#1269064).
- CVE-2026-56370: out-of-bounds access in
ConnectedComponentsImage() when processing connected-components:*
artifacts with invalid indices (bsc#1269063).
- CVE-2026-56371: memory leak in
coders/txt.c when processing TXT files with texture attributes (bsc#1268879).
- CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files
(bsc#1268880).
- CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder...