* SECURITY UPDATE: Integer overflow in the allocation size computation of pcre2_pattern_convert() and pcre2_substring_get_bynumber() leading to an undersized buffer and an out-of-bounds heap write, because both sites multiplied the code-unit count by the code-unit BIT width rather than its byte width and never checked the product for wraparound; reachable with a large pattern or captured substring on 32-bit platforms - debian/patches/CVE-2026-89157.patch: size both allocations with CU2BYTES() and reject a code-unit count that would overflow sizeof(pcre2_memctl) + CU2BYTES(n + 1), in src/pcre2_convert.c and src/pcre2_substring.c - CVE-2026-89157