* SECURITY UPDATE: excessive memory allocation in relative CRLDP processing - debian/patches/openssl-1.1.1-cve-2026-35189.patch: build the full name of a relative CRL distribution point on demand in crl_crldp_check() instead of for every DP when certificate extensions are cached - CVE-2026-35189 * SECURITY UPDATE: DTLS retransmits handshake messages from a stale offset - debian/patches/openssl-1.1.1-cve-2026-84782.patch: reset init_off before resending a buffered message and skip retransmission while a handshake write is suspended, so a retransmit cannot read past the message buffer - CVE-2026-84782 * SECURITY UPDATE: timing side-channel in EC scalar multiplication - debian/patches/openssl-1.1.1-cve-2026-54872.patch: pin the secret scalar to a fixed word width before the BN_add() padding steps in ec_scalar_mul_ladder(), closing a timing side-channel on the nonce - CVE-2026-54872 * SECURITY UPDATE: undersized DTLS 1.2 AEAD record causes DoS - debian/patches/openssl-1.1.1-cve-2026-75806.patch: reject a received AEAD record shorter than the explicit IV plus tag before AEAD processing, so DTLS drops it instead of tearing the association down with internal_error - CVE-2026-75806