this backports upstream commits fixing slew of CVEs:
ea703528a8581a2ea7e0bad424a70fdf0aec7d8f~..4dc6166571645780c459dde2cdc1b001a5ec844c
, adapting context or dropping inapplciable patches as needed for 2.06. changes
noted on individual patches.
commit ef7850c757fb3dd2462a512cfa0ff19c89fcc0b1 is cherry-picked additionally
as pre-requisite.
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
