* SECURITY UPDATE: Unbounded memory retention in the DTLS record layer. dtls1_buffer_record() adopted the entire live read buffer for every queued record and allocated a fresh one, so a peer could pin roughly 16.7 KB of heap per queued record regardless of how small the record actually was, up to the 100-entry queue limit, exhausting memory on the endpoint. - debian/patches/CVE-2026-54874.patch: copy only the received record into a right-sized allocation and restore it on retrieval, leaving the live read buffer in place, in ssl/record/rec_layer_d1.c, ssl/record/record.h and ssl/record/ssl3_record.c. - CVE-2026-54874 * SECURITY UPDATE: Heap buffer overflow in CMS key-agreement recipient processing. For AES key wrap with padding the output size query returns inlen-8 and drives the allocation, while the key-unwrap failure paths then cleanse the full inlen, writing eight bytes past the allocation. - debian/patches/CVE-2026-63072.patch: allocate at least the input length in cms_kek_cipher() in crypto/cms/cms_kari.c. - debian/patches/CVE-2026-63072-test.patch: add the upstream regression test to test/cmsapitest.c and test/recipes/80-test_cmsapi.t. - CVE-2026-63072