CLSA-2026-1787664471 Fix CVE(s): CVE-2026-66140, CVE-2026-66141

SECURITY UPDATE: directory traversal via named-queue arguments - debian/patches/CVE-2026-66140.patch: add validatequeuename and apply it to the -MCG and -qfflG command-line queue names, rejecting names containing '/', longer than 32 characters, or colliding with the reserved spool subdirectories;...