[ Reason ]
Fix CVE-2026-33936 by backporting the upstream fix.
[ Impact ]
Malformed DER-encoded private keys can trigger unexpected exceptions,
leading to a denial of service.
[ Tests ]
The package was built successfully and the test suite passes
with the included fixes.
[ Risks ]
Low. The update consists of upstream patches for CVE-2026-33936.
[ Checklist ]
[x] *all* changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in (old)stable
[x] the issue is verified as fixed in unstable
[ Changes ]
Import and Backport patch.
[ Other info ]
The upload will be sponsored by @josue.