Provide relevant diagnostics when FIPS checksum is corrupted
5317
Don't limit using SHA1 in KDFs in non-FIPS mode.
5295
Provide empty evp_properties section in main OpenSSL configuration file
11439
Avoid implicit function declaration when building openssl
1780
Forbid explicit curves when created via EVP_PKEY_fromdata
5304
AES-SIV cipher implementation contains a bug that causes it to ignore empty
2023-2975)
5302
Excessive time spent checking DH keys and parameters (CVE-2023-3446)
5306
Excessive time spent checking DH q parameter value (CVE-2023-3817)
5308
Fix incorrect cipher key and IV length processing (CVE-2023-5363)
13251
Switch explicit FIPS indicator for RSA-OAEP to approved following
14083
Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
14083
Add missing ECDH Public Key Check in FIPS mode
15990
Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
15954

Make FIPS module configuration more crypto-policies friendly

Add a workaround for lack of EMS in FIPS mode

Remove unsupported curves from nist_curves.

Remove the listing of brainpool curves in FIPS mode.

Fix possible DoS translating ASN.1 object identifiers
2023-2650
Release the DRBG in global default libctx early

Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode

Use OAEP padding and aes-128-cbc by default in cms command in FIPS mode

Enforce using EMS in FIPS mode - better alerts

Upload new upstream sources without manually hobbling them.
Remove the hobbling script as it is redundant. It is now allowed to ship
ec2m' Configure option. The additional forbidden
160, P-192, wap-tls curves are manually removed by updating
Remove-EC-curves.patch.
Enable Brainpool curves.
Apply the changes to ec_curve.c and ectest.c as a new patch
Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.

Backport implicit rejection for RSA PKCS#1 v1.5 encryption

Input buffer over-read in AES-XTS implementation on 64 bit ARM

Enforce using EMS in FIPS mode
Fix excessive resource usage in verifying X509 policy constraints
Fix invalid certificate policies in leaf certificates check
Certificate policy check not enabled
OpenSSL rsa_verify_recover key length checks in FIPS mode

Change explicit FIPS indicator for RSA decryption to unapproved

Add missing reference to patchfile to add explicit FIPS indicator to RSA

Add explicit FIPS indicator to RSA encryption and RSASVE