SECURITY UPDATE: out-of-bounds write via an unsupported AVRCP event
debian/patches/CVE-2023-27349.patch: reject an event id above
AVRCP_EVENT_LAST in avrcp_handle_event() before it is used to index
session->transaction_events, a 14-entry array (upstream f54299a850).