File _patchinfo of Package patchinfo.33737

<patchinfo incident="33737">
  <issue tracker="bnc" id="1222548">VUL-0: CVE-2024-2511: openssl-1_1,openssl-3:Unbounded memory growth with session handling in TLSv1.3</issue>
  <issue tracker="bnc" id="1224388">VUL-0: CVE-2024-4603: openssl-3: excessive time spent checking DSA keys and parameters</issue>
  <issue tracker="cve" id="2024-2511"/>
  <issue tracker="cve" id="2024-4603"/>
  <packager>ohollmann</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for openssl-3</summary>
  <description>This update for openssl-3 fixes the following issues:

- CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548).
- CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating (bsc#1224388).
</description>
</patchinfo>
openSUSE Build Service is sponsored by