* SECURITY UPDATE: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job. - debian/patches/CVE-2026-34980.patch: filter out control characters from IPP option values in scheduler/job.c and allowlist-filter special PPD keywords in the CUPSD_LOG_PPD branch of update_job(); includes the upstream follow-ups for Issue #1532 (get_options() no longer loops forever on a value holding whitespace or a dropped control character), Issue #1562 (the allowlist advances its keyword pointer instead of testing keywords[0] repeatedly), Issue #1630 (whitespace stays backslash-escaped, so cupsParseOptions() in the filters no longer truncates option values containing spaces) and the case-insensitive keyword comparison that closes a "cupsfilter2" spelling bypass of the allowlist. - CVE-2026-34980. * Make the package testable on the ELS build nodes. None of these three changes is a CVE fix; the two patches are also carried by tuxcare-current/debian10els. - debian/patches/maxfds-limit.patch: cap MaxFDs at 65535 in scheduler/main.c, backported from upstream Issue #989 (beb84401c6698dfe937178d8ac8fa38505468dbb), so cupsd stops aborting at startup with "cupsdDoSelect() failed - Bad address!" on hosts whose RLIMIT_NOFILE hard limit is very large but not RLIM_INFINITY. - debian/patches/waiting-limit.patch: bound the "waiting for the scheduler" loop in test/run-stp-tests.sh at 60 seconds and take the test user from "id -un", so a scheduler that will not start fails the build with a diagnostic instead of hanging until the build system's 12 hour task limit. - debian/rules: hand test/run-stp-tests.sh a free TCP port instead of letting its cupsd default to 8631. CUPS_TESTBASE already keeps the config, spool, logs and domain socket of a run private, but pbuilder chroots share the host network namespace, so two cups builds on one node used to fight over that one port -- the second scheduler could not bind, the first answered its "lpstat -r" anyway, and both suites then drove a single cupsd, inflating every absolute count in the test summary.