Address CVE-2025-55763 and fix cmake build problem

Cherry-pick patch(es) from upstream to fix CVE. See https://security-tracker.debian.org/tracker/CVE-2025-55763

Also address the cmake 4.x compatibility problem in the code by adding a workaround to debian/rules for now to avoid FTBFS. See discussion in thread at https://lists.debian.org/debian-devel/2025/06/msg00031.html