SECURITY UPDATE: use-after-free in mod_http2 via shared session->bbtmp
debian/patches/CVE-2026-57941.patch: use a per-call brigade instead
of the shared session->bbtmp in on_send_data_cb() and
ev_stream_closed(), and skip streams already in cleanup state in
rst_unprocessed_stream() and on_stream_close_cb() in
modules/http2/h2_session.c.