- CVE-2026-63072: cms: security hardening in cms_kek_cipher() - size the key-unwrap output buffer for the largest amount the unwrap primitive can write, rather than the length reported for the unwrapped key - CVE-2026-63072: modes: cleanse padded_len rather than inlen on the four CRYPTO_128_unwrap_pad() integrity-failure paths, so the exported primitive no longer writes 8 bytes past an output buffer sized per its own documented contract (inlen - 8)