SECURITY UPDATE: signed 32-bit integer overflow in SIXEL decoder; buffer
reallocation overflow leading to memory corruption and denial of service
debian/patches/CVE-2026-25970.patch: Fix out-of-bounds write; Rename
misnamed position variables and adjust index arithmetic and casts using
signed sizes and correct bounds checks; cause: variable name typos and
incorrect type/arithmetic causing improper offset validation.