Various security vulnerabilities have been fixed in openssl:

- DTLS plaintext recovery attack (CVE-2011-4108)
- uninitialized SSL 3.0 padding (CVE-2011-4576)
- malformed RFC 3779 data can cause assertion failures
(CVE-2011-4577)
- SGC restart DoS attack (CVE-2011-4619)
- invalid GOST parameters DoS attack (CVE-2012-0027)