File _patchinfo of Package patchinfo.33737
<patchinfo incident="33737"> <issue tracker="bnc" id="1222548">VUL-0: CVE-2024-2511: openssl-1_1,openssl-3:Unbounded memory growth with session handling in TLSv1.3</issue> <issue tracker="bnc" id="1224388">VUL-0: CVE-2024-4603: openssl-3: excessive time spent checking DSA keys and parameters</issue> <issue tracker="cve" id="2024-2511"/> <issue tracker="cve" id="2024-4603"/> <packager>ohollmann</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for openssl-3</summary> <description>This update for openssl-3 fixes the following issues: - CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548). - CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating (bsc#1224388). </description> </patchinfo>