SECURITY UPDATE: Invalid stream not detected during block switch decoding
debian/patches/CVE-2026-111497.patch: return an error code from the
literal/command/distance block-switch decoders and abort decoding with
BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH in c/dec/decode.c,
c/include/brotli/decode.h