Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
Resolves: rhbz#2176790

Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
Related: rhbz#2067160

Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
Resolves: rhbz#2039993

fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
Resolves: rhbz#1996054

fix CVE-2021-23841 openssl: NULL pointer dereference
fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
Resolves: rhbz#1932132, rhbz#1932126

remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch

fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference

close the RSA decryption 9 lives of Bleichenbacher cat

fix CVE-2018-0734 - DSA signature local timing side channel
fix CVE-2019-1559 - 0-byte record padding oracle
close the RSA decryption One & done EM side channel (#1619558)

use SHA-256 in FIPS RSA pairwise key check
fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
channel key extraction

fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
fix incorrect error message on FIPS DSA parameter generation (#1603597)

ppc64le is not multilib architecture (#1585004)

add S390x assembler updates
make CA name list comparison function case sensitive (#1548401)
fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
fix CVE-2018-0732 - large prime DH DoS of TLS client
fix CVE-2018-0737 - RSA key generation cache timing vulnerability
fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure

fix CVE-2017-3737 - incorrect handling of fatal error state
fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus

fix deadlock in RNG in the FIPS mode in mariadb

fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication