* SECURITY UPDATE: Heap buffer overflow in ASN1_mbstring_ncopy() where the destination length for BMPSTRING and UNIVERSALSTRING output is computed by a signed left shift that can overflow int, producing an undersized allocation followed by out-of-bounds writes for oversized attacker-controlled inputs reaching ASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly. - debian/patches/CVE-2026-7383.patch: reject oversized inputs before the shifts and in out_utf8() in crypto/asn1/a_mbstr.c. - CVE-2026-7383 * SECURITY UPDATE: Out-of-bounds read in kek_unwrap_key() check-byte validation when a CMS PasswordRecipientInfo uses a KEK cipher with a block size smaller than 4 octets, making the decrypted buffer smaller than the seven octets the check-byte test reads. - debian/patches/CVE-2026-9076.patch: reject blocklen < 4 and oversized inlen in kek_unwrap_key() in crypto/cms/cms_pwri.c. - CVE-2026-9076 * SECURITY UPDATE: Heap buffer over-read in ASN.1 content parsing: the long content length was truncated to int in asn1_ex_c2i(), so ASN1_STRING_set() could be called with an inconsistent length. - debian/patches/CVE-2026-34180.patch: pass the length as long in asn1_ex_c2i() and reject lengths not representable as int in crypto/asn1/tasn_dec.c. - CVE-2026-34180 * SECURITY UPDATE: NULL pointer dereference when processing CMS PasswordRecipientInfo with the optional keyDerivationAlgorithm field absent, allowing a denial of service via crafted CMS messages. - debian/patches/CVE-2026-42766.patch: fail cleanly when keyDerivationAlgorithm is missing in crypto/cms/cms_pwri.c. - CVE-2026-42766