CVE-2026-50256: fix stack buffer overflow in font alias resolution by raising XLFDMAXFONTNAMELEN to libXfont2's MAXFONTNAMELEN and bounds-checking resolved names
CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat by deduplicating attachments and tracking front buffers as booleans