SECURITY UPDATE: heap buffer overflow in FTS5 corrupt-record handling
debian/patches/CVE-2026-11822-and-11824.patch: reject leaf pages with
szLeaf < 4 in fts5LeafRead() in ext/fts5/fts5_index.c, closing the
out-of-bounds read / heap buffer overflow paths in fts5ChunkIterate()
and fts5LeafSeek().