[ Reason ]
Backporting fixes for 5 minor CVEs reported by DSA today.
CVE-2025-70102 was fixed in 10.3.1 (Sid has 10.3.2) but never backported until now.
Meanwhile, the fix for these four CVEs has long been sitting in upstream Git:
CVE-2026-56113,
CVE-2026-56114,
CVE-2026-56116,
CVE-2026-56117.
All four patches have just been applied to Sid/Forky pending a new upstream release.
[ Impact ]
Minor.
[ Tests ]
Verified to boot on a host running Trixie.
[ Risks ]
Minor. Most of the patches are one-line fixes. Two of the patches are slightly more involved.
[ Checklist ]
[*] *all* changes are documented in the d/changelog
[*] I reviewed all changes and I approve them
[*] attach debdiff against the package in (old)stable
[*] the issue is verified as fixed in unstable
[ Changes ]
* Imported patches for 5 CVEs.
* Defuzzed all patches.