SECURITY UPDATE: heap buffer overflow / out-of-bounds write in the MVG
decoder via a crafted image
debian/patches/CVE-2026-33901.patch: cap the length of a push
gradient / pattern / clip-path block before it is copied into the
token buffer in DrawImage() in magick/draw.c
CVE-2026-33901
SECURITY UPDATE: stack exhaustion (denial of service) from unbounded
recursion when destroying a deeply nested XML tree
debian/patches/CVE-2026-33908.patch: thread a recursion depth through
DestroyXMLTree() and raise a fatal error past MagickMaxRecursionDepth
in magick/xml-tree.c