CLSA-2026-1777311048 Fix CVE(s): CVE-2026-32636

SECURITY UPDATE: out-of-bounds write of a single zero byte in NewXMLTree when processing UTF-16 encoded XML - debian/patches/CVE-2026-32636.patch: allocate one extra byte in ConvertUTF16ToUTF8 to accommodate the NUL terminator written after the buffer - CVE-2026-32636 - ELSCVE-88723...