SECURITY UPDATE: incorrect regex match in Aho-Corasick prescan (GH#22892)
debian/patches/fixes/CVE-2026-19487.patch: reset the stale failed flag
after a successful trie transition in the AHOCORASICK arm of
S_find_byclass() in regexec.c, so the prescan is no longer aborted on a
worse or non-matching alternative; adds the upstream regression vectors
to t/re/re_tests