* SECURITY UPDATE: buffer overrun in the script engine where copy operations wrote past the buffer end when a variable's length changed between the length and copy passes (e.g. captures or volatile variables with side effects), trailing uninitialised bytes could leak when the result was shorter than predicted, and an uninitialised memory read caused by stale regex captures could leak data or overrun the buffer - debian/patches/CVE-2026-42533.patch: add the e->end buffer-end pointer and ngx_http_script_check_length() guard to all script copy operations, extend the protection to direct script evaluation in the proxy, fastcgi, scgi, uwsgi, grpc, index and try_files modules and to the http and stream access log script engines, cut the result string to its actual size, and reset r->ncaptures when reallocating r->captures in src/http/ngx_http_script.{c,h}, src/stream/ngx_stream_script.{c,h}, src/http/modules/ngx_http_*_module.c, src/stream/ngx_stream_log_module.c and src/http/ngx_http_variables.c - CVE-2026-42533