SECURITY UPDATE: Denial of service in the optional imptcp module
debian/patches/CVE-2026-19654.patch: guard the regex framing match at
line start in plugins/imptcp/imptcp.c, so a match at offset zero after
oversize-frame recovery can no longer submit a negative message length