SECURITY UPDATE: null pointer dereference and crash in image reading
debian/patches/CVE-2026-25795.patch: Fix NULL pointer dereference; move
DestroyImageInfo call after filename copy; cause: DestroyImageInfo was
called before filename copy, freeing read_info used to access filename.