CLSA-2026-1791403476 Fix CVE(s): CVE-2026-94054, CVE-2026-94056

SECURITY UPDATE: out-of-bounds access in Proxy-Protocol v1 header parsing with an attacker-controlled proxy - debian/patches/CVE-2026-94054.patch: set ret to the length of the heap copy of the PROXY v1 line instead of adding the swallowuntilcrlf count, so the memchr for the CR stays inside the co...