Bug#1149060: libical3: CVE-2026-88383

[Nicolas Mora]

I'm glad that this CVE is for a release for a package not in debían yet.

libical 4.0.6 isn't officially released by upstream and packaging libical 4.0.5 
is still a work in progress. 

Thanks for the heads up!