* SECURITY UPDATE: Quadratic CPU use in schemaless container decoding - debian/patches/CVE-2026-119194.patch: stop collecting component tag sets once two distinct types settle the SEQUENCE/SET guess - CVE-2026-119194 * SECURITY UPDATE: Quadratic constructed OCTET STRING and ANY reassembly - debian/patches/CVE-2026-119195.patch: collect fragments in a list and join them once instead of repeated bytes concatenation - CVE-2026-119195 * SECURITY UPDATE: Quadratic constructed BIT STRING reassembly - debian/patches/CVE-2026-119196.patch: pack fragment bits into one buffer instead of re-shifting the accumulated value per fragment - CVE-2026-119196 * SECURITY UPDATE: Quadratic binary REAL mantissa decoding - debian/patches/CVE-2026-119197.patch: convert the mantissa with a single from_bytes() call instead of a per-octet shift loop - CVE-2026-119197