Hi,

I’d like to fix CVE-2026-102601 in Trixie that has been tagged as no-dsa
by the security team. The patch is straightforward (yet, had to be
adapted) and includes an additional test case.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

Thanks in advance for considering.

Regards,

taffit