Hi Should be notd that in Debian CVE-2025-48964 is not affected because it exists because of an incomplete fix for CVE-2025-47268. So the goal is just to make the fixes complete for CVE-2025-47268. The proposed action to just rebase to 20250605 is sound, but might be defered after 9th of august when trixie is released.
Regards, Salvatore