SECURITY UPDATE: unhandled HTMLParseError denial of service in HTMLParser
when parsing malformed markup declarations
debian/patches/CVE-2025-69534.patch: narrow the marked-section dispatch
in parse_html_declaration() in Lib/HTMLParser.py so only "<![CDATA["
is routed to parse_marked_section(); any other malformed "<!..."
construct now falls through to parse_bogus_comment() instead of
raising HTMLParseError; also update the test_broken_condcoms
expectations to match.