SECURITY UPDATE: memory leak in the MSL decoder on group end tags
debian/patches/CVE-2026-86421.patch: destroy draw_info for each
grouped image in the group cleanup loop in MSLEndElement() in
coders/msl.c
debian/patches/CVE-2026-86421-1.patch: bound the group cleanup loop
on msl_info->n in MSLEndElement() in coders/msl.c, so the added
DestroyDrawInfo() cannot run past the base of the stack when a
second re-uses a stale numImages count