File _patchinfo of Package patchinfo.20905

<patchinfo incident="20905">
  <issue tracker="cve" id="2021-3712"/>
  <issue tracker="cve" id="2021-3711"/>
  <issue tracker="bnc" id="1189520">openssl-1_1: SM2 Decryption Buffer Overflow</issue>
  <issue tracker="bnc" id="1189521">openssl,openssl1,openssl-1_0_0,openssl-1_1,compat-openssl098: Read buffer overrun in X509_aux_print()</issue>
  <packager>jsikes</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for openssl-1_1</summary>
  <description>This update for openssl-1_1 fixes the following security issues:

- CVE-2021-3711: A bug in the implementation of the SM2 decryption code
  could lead to buffer overflows. [bsc#1189520]

- CVE-2021-3712: a bug in the code for printing certificate details could
  lead to a buffer overrun that a malicious actor could exploit to crash
  the application, causing a denial-of-service attack. [bsc#1189521]
</description>
</patchinfo>