CLSA-2026-1788334635 Fix CVE(s): CVE-2026-57433, CVE-2026-9538

SECURITY UPDATE: denial of service via signed integer overflow when deserializing a crafted Storable blob - debian/patches/fixes/CVE-2026-57433.patch: reject a hook data item count of I32MAX in retrievehookcommon in dist/Storable/Storable.xs before it is incremented and passed to avextend;...

CLSA-2026-1788175793 Fix CVE(s): CVE-2026-57433

SECURITY UPDATE: signed integer overflow in Storable SXHOOK deserialization - debian/patches/fixes/CVE-2026-57433.patch: croak on a hook data item count of I32MAX before avextend is called with an overflowed negative count in retrievehook in dist/Storable/Storable.xs - CVE-2026-57433...