CVE-2026-58010: heap buffer over-read (off-by-one) in gvs_tuple_is_normal()
in glib/gvariant-serialiser.c when checking untrusted tuple GVariant data
for normal form
CVE-2026-58012: buffer over-read in g_regex_replace()/g_regex_replace_eval()
when a G_REGEX_RAW match ends in a truncated multi-byte sequence and a
case-change escape is applied