CVE-2026-58011: out-of-bounds read from an invalid GDateTime produced by
g_date_time_add_full() without range validation, later read by
g_date_time_get_ymd()
CVE-2026-58013: heap buffer over-read in g_io_channel_read_line_backend()
when a multi-byte line terminator is memcmp'd past the end of the buffer