- Read/write after SSL object in error state (CVE-2017-3737) - rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)