* SECURITY UPDATE: heap buffer overflow in DTLS handshake reassembly - debian/patches/CVE-2026-33846.patch: add length-consistency and array bounds checks in merge_handshake_packet in lib/buffers.c to reject DTLS fragments with mismatching or oversized claimed length - CVE-2026-33846 * SECURITY UPDATE: denial of service via non-conforming qsort comparator - debian/patches/CVE-2026-42009.patch: return 0 for equal sequence numbers in handshake_compare in lib/buffers.c so DTLS packet ordering follows the qsort strict-weak-ordering contract - CVE-2026-42009 * SECURITY UPDATE: heap over-read on short RSA ciphertext with PKCS#11 key - debian/patches/CVE-2026-5260.patch: verify ciphertext size matches the RSA modulus in proc_rsa_client_kx and _gnutls_proc_rsa_psk_client_kx (lib/auth/rsa.c, lib/auth/rsa_psk.c) and size the PKCS#11 decrypt buffer with MAX(siglen, plaintext_size) in lib/pkcs11_privkey.c - CVE-2026-5260