14_version_gettextcat.diff
40_srptest_doubletimeout.diff
41_run_cligen_on_debian.diff
45_lib-x509-x509_ext.c-Add-gnutls_free-to-avoid-memory-.patch
46_lib-hello_ext.c-Add-gnutls_free-to-avoid-memory-leak.patch
47_0001-x509-fix-read-buffer-overrun-in-SCT-timestamps.patch
47_0002-psk-fix-read-buffer-overrun-in-the-pre_shared_key-ex.patch
47_0003-x509-reject-zero-length-version-in-certificate-reque.patch
47_0004-x509-avoid-double-free-when-exporting-othernames-in-.patch
47_0005-certtool-avoid-1-byte-write-buffer-overrun-when-pars.patch
47_0006-handshake-clear-HSK_PSK_SELECTED-is-when-resetting-b.patch

# Patches between 3.8.9 and 2025/03/19
post-3.8.9/0001-handshake-only-shuffle-extensions-in-the-first-Clien.patch
post-3.8.9/0002-build-fix-SONAME-detection-when-linking-failed.patch
post-3.8.9/0003-tests-make-pqc-hybrid-kx.sh-work-when-system-time-se.patch

# Ubuntu patches
9259100633b77a0dc03f83047d7cf778466bf9f3.patch
crypto-config.patch
CVE-2025-9820.patch
CVE-2025-14831-1.patch
CVE-2025-14831-2.patch
CVE-2025-14831-3.patch
CVE-2025-14831-4.patch
CVE-2025-14831-5.patch
CVE-2025-14831-6.patch
CVE-2025-14831-7.patch
CVE-2025-14831-8.patch
CVE-2025-14831-9.patch
CVE-2026-33846-pre1.patch
CVE-2026-33846.patch
CVE-2026-42009-pre1.patch
CVE-2026-42009-1.patch
CVE-2026-42009-2.patch
CVE-2026-33845-pre1.patch
CVE-2026-33845.patch
CVE-2026-33845-2.patch
CVE-2026-3832.patch
CVE-2026-3833.patch
CVE-2026-42011.patch
CVE-2026-42010.patch
CVE-2026-5260-1.patch
CVE-2026-5260-2.patch
CVE-2026-42012-pre1.patch
CVE-2026-42012-pre2.patch
CVE-2026-42012.patch
CVE-2026-42013-pre1.patch
CVE-2026-42013.patch
CVE-2026-42014.patch
CVE-2026-42015.patch
CVE-2026-5419.patch
CVE-2026-5419-2.patch
