* SECURITY UPDATE: NULL pointer dereference in check_delta_base() when a delta CRL is processed without the required CRL Number extension and X509_V_FLAG_USE_DELTAS is enabled, leading to a denial of service. - debian/patches/CVE-2026-28388.patch: add NULL check for delta->crl_number before ASN1_INTEGER_cmp() in check_delta_base() - CVE-2026-28388 * SECURITY UPDATE: NULL pointer dereference in dh_cms_set_shared_info() and ecdh_cms_set_shared_info() when a CMS EnvelopedData message uses KeyAgreeRecipientInfo with a KeyEncryptionAlgorithmIdentifier whose optional parameter field is omitted, leading to a denial of service. - debian/patches/CVE-2026-28389.patch: check alg->parameter for NULL before accessing its type field in dh_cms_set_shared_info() and ecdh_cms_set_shared_info() - CVE-2026-28389