- CVE-2015-4000 (boo#931698)
* The Logjam Attack / weakdh.org
* reject connections with DH parameters shorter than 768 bits
* generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
* Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
* Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
* PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
* CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
* race condition in NewSessionTicket
- newly added patches:
* 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
* 0002-dhparam-set-the-default-to-2048-bits.patch
* 0003-dhparam-fix-documentation.patch
* 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
* 0005-client-reject-handshakes-with-DH-parameters-768-bits.patch
* openssl-CVE-2015-1788.patch
* openssl-CVE-2015-1789.patch
* openssl-CVE-2015-1790.patch
* openssl-CVE-2015-1791.patch
* openssl-CVE-2015-1792.patch