Logjam, FREAK and upcoming changes in OpenSSL

{
  "id": "252d0d4f026e11b2e9e345c2ef5f707e456f276b2157b6e9ed67f7eb48571368",
  "url": "https://openssl-library.org/post/2015-05-20-logjam-freak-upcoming-changes/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Logjam, FREAK and upcoming changes in OpenSSL",
    "summary": "OpenSSL strengthens cryptographic defaults in its stable branches, including rejecting DH parameters shorter than 768 bits and disabling export cipher suites by default. The announcement also describes changes to DH parameter generation and elliptic-curve support.",
    "evidence": "OpenSSL clients will reject connections with DH parameters shorter than 768 bits.",
    "products": [
      {
        "name": {
          "value": "OpenSSL",
          "evidence": "Changes affecting OpenSSL 1.0.1 and OpenSSL 1.0.2:"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "OpenSSL 1.0.2b",
            "evidence": "[OpenSSL 1.0.2b (next release), OpenSSL 1.0.1n (next release)]"
          },
          {
            "value": "OpenSSL 1.0.1n",
            "evidence": "[OpenSSL 1.0.2b (next release), OpenSSL 1.0.1n (next release)]"
          }
        ],
        "affected_versions": [
          {
            "value": "OpenSSL 1.0.1",
            "evidence": "Changes affecting OpenSSL 1.0.1 and OpenSSL 1.0.2:"
          },
          {
            "value": "OpenSSL 1.0.2",
            "evidence": "Changes affecting OpenSSL 1.0.1 and OpenSSL 1.0.2:"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-openssl-news",
  "document_id": 24281,
  "published_at": "2015-05-20T18:12:00+00:00"
}