Fix possible DoS translating ASN.1 object identifiers
2023-2650
Release the DRBG in global default libctx early

Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode

Use OAEP padding and aes-128-cbc by default in cms command in FIPS mode

Enforce using EMS in FIPS mode - better alerts

Upload new upstream sources without manually hobbling them.
Remove the hobbling script as it is redundant. It is now allowed to ship
ec2m' Configure option. The additional forbidden
160, P-192, wap-tls curves are manually removed by updating
Remove-EC-curves.patch.
Enable Brainpool curves.
Apply the changes to ec_curve.c and ectest.c as a new patch
Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.

Backport implicit rejection for RSA PKCS#1 v1.5 encryption

Input buffer over-read in AES-XTS implementation on 64 bit ARM

Enforce using EMS in FIPS mode
Fix excessive resource usage in verifying X509 policy constraints
Fix invalid certificate policies in leaf certificates check
Certificate policy check not enabled
OpenSSL rsa_verify_recover key length checks in FIPS mode

Change explicit FIPS indicator for RSA decryption to unapproved

Add missing reference to patchfile to add explicit FIPS indicator to RSA

Add explicit FIPS indicator to RSA encryption and RSASVE

Fix explicit FIPS indicator for X9.42 KDF when used with output lengths < 14 bytes

Fix Wpointer-sign compiler warning

Add explicit FIPS indicators to key derivation functions
Zeroize FIPS module integrity check MAC after check
Add explicit FIPS indicator for IV generation in AES-GCM
Add explicit FIPS indicator for PBKDF2, use test vector with FIPS-compliant
test
Limit RSA_NO_PADDING for encryption and signature in FIPS mode
Pairwise consistency tests should use Digest+Sign/Verify
Forbid DHX keys import in FIPS mode
DH PCT should abort on failure
Increase RNG seeding buffer size to 32

Fixes RNG slowdown in FIPS mode

Fixed X.509 Name Constraints Read Buffer Overflow
2022-4203
Fixed Timing Oracle in RSA Decryption
2022-4304
Fixed Double free after calling PEM_read_bio_ex
2022-4450
Fixed Use-after-free following BIO_new_NDEF
2023-0215
Fixed Invalid pointer dereference in d2i_PKCS7 functions
2023-0216
Fixed NULL dereference validating DSA public key
2023-0217
Fixed X.400 address type confusion in X.509 GeneralName
2023-0286
Fixed NULL dereference during PKCS7 data verification
2023-0401