SECURITY UPDATE: out-of-bounds read when handling malformed ICP traffic
debian/patches/CVE-2026-33515.patch: validate ICP packet sizes and
URLs in icpGetUrl(); reject non-NUL-terminated URLs, URLs with
embedded NULs or trailing garbage; guard icpHandleUdp() against a
nil icpOutgoingConn pointer