Control: tags -1 + fixed-upstream Hi,
The fix from the security tracker, 97e0d968a782 "main: clear SUID/SGID bits on truncate (CVE-2026-52791)" is on the release-1.x branch and in tags v1.17 and v1.18. It only touches main.c, and it applies to 1.14-1 (unstable, forky and trixie all have 1.14-1) with offsets of +8/-91 and no fuzz, using the source on https://www.google.com/url?q=http://sources.debian.org&source=gmail&ust=1793800252337000&sa=E . Mechanical patch-applies check only; not built or tested. Regards
