debian/patches/CVE-2026-26284.patch: Fix incorrect loop
initialization in delta decoding; prevent out-of-bounds read caused by
starting table scan at invalid index.
CVE-2026-26284
SECURITY UPDATE: out-of-bounds heap write on 32-bit systems
debian/patches/CVE-2026-25897.patch: Add size-calculating
heap overflow sanity check and validate row padding addition to prevent
out-of-bounds heap write on 32-bit systems caused by integer overflow in
pixel buffer length computation.