Bug#1114938: vtk9 Fails to parse correct vtk files that contain raw binary data since security update to libexpat

[Drew Parsons]

Source: vtk9
Followup-For: Bug #1114938
X-Debbugs-Cc: Debian Security Team <team at security.debian.org>

The issue with paraview's embedded copy of VTK is finally being
resolved with paraview 6 and vtk 9.5, though that won't help bookworm.

The patch being considered here for VTK looks more or less trivial,
meaning it should be simple enough to apply it to both vtk and
paraview in bookworm.

The upstream patch is

https://gitlab.kitware.com/vtk/vtk/-/commit/db8f9efca220c9d16a30958e179abae3379d0011