Fix incorrect handling of Early EAP-Success Messages (CVE-2021-45079)

5.9 is still in upstream/latest

Fix integer overflow when replacing certificates in cache (CVE-2021-41991)

Fix integer overflow in gmp plugin which can lead to denial of service
(CVE-2021-41990)

Update to upstream version '5.9.1'
with Debian dir ca9947255e86d4730d31a8fb8afa324c092b3c05

Update to upstream version '5.9.0'
with Debian dir 4d3ef952b4f1bdbb71d22b381157446a12e67b64

Bullseye toolchain enforce it by default so no need here

Update to upstream version '5.8.4'
with Debian dir 4c58b2b1dd428a8831f9f8b25e0efc110e4eeb88

Closes: #951016

this is needed for init-system-helper to add the proper dependencies

Update to upstream version '5.8.2'
with Debian dir d18f9f24a66697b0304850026bcd315ed49fee11

Closes: #946148