CLSA-2026-1787064466 Fix CVE(s): CVE-2026-40176, CVE-2026-40261

Non-maintainer upload by the TuxCare ELS team. CVE-2026-40261: Prevent a command injection vulnerability in Perforce::syncCodeBase, which appended the source reference to the 'p4 sync -f' command without escaping. Package metadata served by a malicious or compromised Composer repository could...