- CVE-2026-35189: x509v3: defer building the full name of relative (nameRelativeToCRLIssuer) CRL distribution points until a CRL is matched, avoiding excessive memory allocation when certificate extensions are cached - CVE-2026-84782: dtls: reset init_off before retransmitting a buffered handshake message and skip retransmission while a handshake write is suspended, avoiding a heap over-read and handshake state corruption - CVE-2026-54872: ec: pin the secret scalar to a fixed word width in ec_scalar_mul_ladder() before padding it, closing a timing side-channel on the nonce for curves without a dedicated implementation - CVE-2026-75806: tls: reject received TLS 1.2/DTLS 1.2 AEAD records shorter than the explicit IV plus tag before AEAD processing, so DTLS drops them instead of tearing the association down with internal_error