* SECURITY UPDATE: unresolved optimizer hints in UNION VIEW queries - debian/patches/CVE-2025-30687.patch: Fixes a bug where optimizer hints for query blocks after the first UNION block in a VIEW definition remain unresolved. Introduces a deferred hint contextualization mechanism: hints that cannot be immediately resolved are stored and re-evaluated after all query block names are known. - CVE-2025-30687 * SECURITY UPDATE: AggregateIterator crash with ORDER BY on set operation - debian/patches/CVE-2025-30682.patch: When an ORDER BY containing an aggregate function on the outer set operation query block was hidden inside a subquery that got optimized away, the check in setup_order was bypassed, causing a server crash at AggregateIterator::Init(). The fix moves the is_set_operation() guard into check_sum_func, catching the invalid aggregation regardless of subquery rewriting. - CVE-2025-30682 * SECURITY UPDATE: EXPLAIN crash with derived table stored function - debian/patches/CVE-2026-21968.patch: Fixed a server crash where EXPLAIN SELECT on LEFT JOIN with derived tables containing stored functions and GROUP BY could segfault. The optimizer incorrectly marked derived tables with stored programs as const during EXPLAIN mode, triggering a NULL query_result pointer dereference. The fix adds is_const_optimizable() guards in three const-table extraction paths. - CVE-2026-21968