CLSA-2026-1788856499 Fix CVE(s): CVE-2026-54874, CVE-2026-63072

SECURITY UPDATE: Unbounded memory retention in the DTLS record layer. dtls1bufferrecord adopted the entire live read buffer for every queued record and allocated a fresh one, so a peer could pin roughly 16.7 KB of heap per queued record regardless of how small the record actually was, up to the...

CLSA-2026-1788271054 Fix CVE(s): CVE-2026-54874, CVE-2026-63072

SECURITY UPDATE: Memory amplification denial of service in the DTLS record layer: buffering a record that arrives early for the next epoch retained the entire read buffer, sized for the largest possible DTLS record 16.7KB, rather than only the record's own bytes, so a peer sending a stream of sma...