SECURITY UPDATE: integer overflow in the pixel cache staging buffer size
debian/patches/CVE-2026-106571.patch: use overflow-checked
multiplications for the staging buffer size in
SetPixelCacheNexusPixels() in magick/cache.c
CVE-2026-106571
SECURITY UPDATE: coder security policy bypass
debian/patches/CVE-2026-106579.patch: check the coder name against the
coder policy at all four decoder and encoder calls, including the
WriteImage() fallback, in magick/constitute.c
CVE-2026-106579
SECURITY UPDATE: PostScript code injection through image labels
debian/patches/CVE-2026-106577.patch: escape parentheses and backslashes
in, and trim, the labels written by the PS, PS2, PS3 and PDF coders in
coders/ps.c, coders/ps2.c, coders/ps3.c and coders/pdf.c