debian/patches/fixes/CVE-2026-13221.patch: do not build a trie when the
branch-to-tail delta would overflow the 16-bit next-offset field in
S_study_chunk() in regcomp.c
CVE-2026-13221
SECURITY UPDATE: integer overflow in pack/unpack structure sizing
debian/patches/fixes/CVE-2026-57432.patch: add I32 overflow check
before the size accumulation in S_measure_struct() in pp_pack.c