* SECURITY UPDATE: peer-supplied --backup-dir and --partial-dir escape the daemon module - debian/patches/CVE-2026-70460.patch: track the resolved path in the ownership walk and refuse any component that leaves the module root, and route make_backup() and the --inplace backup (link, rename, copy, mkdir, mknod, symlink and attribute updates) and the --partial-dir handling (basis stat, open and unlink, in-place staging, delayed rename, partial-dir create and remove) through that walk, so an in-module symlink cannot redirect an absolute --backup-dir or --partial-dir outside a "use chroot = no" module - CVE-2026-70460