SECURITY UPDATE: denial of service via signed integer overflow when
deserializing a crafted Storable blob
debian/patches/CVE-2026-57433.patch: reject a hook data item count of
I32_MAX in retrieve_hook_common() in dist/Storable/Storable.xs before
it is incremented and passed to av_extend(); backported from upstream
commit e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.