* SECURITY UPDATE: off-by-one out-of-bounds read in GVariant normal-form checking - debian/patches/CVE-2026-58010.patch: fix an off-by-one offset comparison in gvs_tuple_is_normal() - CVE-2026-58010 * SECURITY UPDATE: out-of-range GDateTime creation leading to out-of-bounds reads in getter functions - debian/patches/CVE-2026-58011.patch: add missing range validation to g_date_time_add_full() - CVE-2026-58011 * SECURITY UPDATE: buffer over-read in g_regex_replace() case-change substitutions under G_REGEX_RAW - debian/patches/CVE-2026-58012.patch: operate on bytes instead of UTF-8 characters when changing case of raw-mode matches - CVE-2026-58012 * SECURITY UPDATE: memcmp() buffer over-read in g_io_channel_read_line() with multi-byte line terminators - debian/patches/CVE-2026-58013.patch: check the remaining buffer length against the line terminator length before memcmp() - CVE-2026-58013