SECURITY UPDATE: TIM coder integer overflow on 32-bit
debian/patches/CVE-2025-66628.patch: bounds check in coders/tim.c
CVE-2025-66628
SECURITY UPDATE: PCD coder infinite loop on short read
debian/patches/CVE-2026-24485.patch: PCDGetBits guard in coders/pcd.c
plus EOFBlob-based Sync-search / main-loop guards backported from
upstream ecbccb6fe4b2 so the fix survives the size_t bits
underflow on repeated short reads