* SECURITY UPDATE: out-of-bounds NULL write past the argv allocation in the daemon's read_args() - debian/patches/CVE-2026-70456.patch: grow argv to argc+1 entries before storing the trailing NULL in read_args(), since the post-dot glob_expand()/glob_match() path reserves room only for the entry it adds and the pre-dot growth check at "argc == maxargs-1" never fires once dot_pos is set; keep this tree's realloc_array()/out_of_memory() idiom, as 3.1.1's allocator returns NULL on failure rather than aborting - CVE-2026-70456