SECURITY UPDATE: denial of service and limited memory disclosure in CTDB
via malformed packets on the CTDB private network and event socket
debian/patches/CVE-2026-58224.patch: validate protocol field lengths
against the packet length when unmarshalling, bound array element
counts by the remaining buffer to avoid out-of-memory allocations,
fix string NUL-termination edge cases in ctdb_string_pull() and
ctdb_stringn_pull(), and restrict sock_daemon Unix domain sockets to
the owning user