Security release: CVE-2025-55154 (integer overflow in MNG MAGN chunk
handling), CVE-2026-56379 (command injection via crafted SVG drawing
commands) and CVE-2026-103118 (stack exhaustion in the WPG reader),
plus heap buffer over-reads in GenerateIPTCAttribute() and missing
overflow detection in the PICT decoder.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>