debian/patches/CVE-2026-13221.patch: do not build a trie when the
branch-to-tail delta would overflow the 16-bit next-offset field in
S_study_chunk() in regcomp.c
CVE-2026-13221
SECURITY UPDATE: integer overflow in pack/unpack structure sizing (S_measure_struct); a large repeat count wraps the signed size negative, leading to an out-of-bounds heap read
debian/patches/CVE-2026-57432.patch: integer overflow in pack/unpack structure sizing (S_measure_struct); a large repeat count wraps the signed size negative, leading to an out-of-bounds heap read