debian/patches/CVE-2026-25897.patch: prevent integer overflow
during pixel buffer size calculation by using checked multiplication and
validating rows addition; issue caused by unvalidated header values
allowing overflow and incorrect allocation size
debian/patches/CVE-2026-26284.patch: prevent out-of-bounds read
while searching PCD decode table by starting iteration at first valid
element; issue caused by loop beginning at index 0 and incrementing
pointer past the table end when no sequence matched