File _patchinfo of Package patchinfo.29293
<patchinfo incident="29293">
<issue tracker="cve" id="2023-1255"/>
<issue tracker="cve" id="2023-2650"/>
<issue tracker="bnc" id="1210714">VUL-0: CVE-2023-1255: openssl-3: Input buffer over-read in AES-XTS implementation on 64 bit ARM</issue>
<issue tracker="bnc" id="1211430">VUL-0: CVE-2023-2650: openssl-3,openssl-1_1,compat-openssl098,openssl1,openssl-1_0_0,openssl: Possible DoS translating ASN.1 object identifiers</issue>
<packager>ohollmann</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for openssl-3</summary>
<description>This update for openssl-3 fixes the following issues:
- CVE-2023-1255: Fixed input buffer over-read in AES-XTS implementation on 64 bit ARM (bsc#1210714).
- CVE-2023-2650: Fixed possible DoS translating ASN.1 object identifiers (bsc#1211430).
</description>
</patchinfo>