SECURITY UPDATE: global buffer overflow read via negative pixel index in
UIL and XPM image encoders
debian/patches/CVE-2026-25898.patch: clamp negative pixel index values
to zero in WriteUILImage, WritePICONImage, and WriteXPMImage before
using them as array subscripts into the Cixel table.