CVE-2024-28085: wall: fix escape sequence injection in argv messages by
sanitizing characters through buf_putc_careful(), preventing arbitrary text
injection into other users' terminals (WallEscape)
CVE-2026-3184: login: use original FQDN for PAM_RHOST to prevent hostname
canonicalization from bypassing host-based PAM access control rules