SECURITY UPDATE: denial of service via signed integer overflow when
deserializing a crafted Storable blob
debian/patches/fixes/CVE-2026-57433.patch: reject a hook data item
count of I32_MAX in retrieve_hook_common() in
dist/Storable/Storable.xs before it is incremented and passed to
av_extend(); backported from upstream commit
e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.