File _patchinfo of Package patchinfo.29254
<patchinfo incident="29254"> <issue tracker="bnc" id="1201627">openssl-1_0_0 FTBFS 2023-05-26</issue> <issue tracker="bnc" id="1207534">VUL-0: CVE-2022-4304: openssl: Timing Oracle in RSA Decryption</issue> <issue tracker="cve" id="2022-4304"/> <packager>ohollmann</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for openssl-1_1</summary> <description>This update for openssl-1_1 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534). - Update further expiring certificates that affect the testsuite (bsc#1201627). </description> </patchinfo>