File _patchinfo of Package patchinfo.28534
<patchinfo incident="28534"> <issue tracker="bnc" id="1209878">VUL-0: CVE-2023-0465: openssl-1_1,openssl1,openssl,openssl-1_0_0,openssl-3: Invalid certificate policies in leaf certificates are silently ignored</issue> <issue tracker="bnc" id="1209873">VUL-1: CVE-2023-0466: openssl-3,openssl-1_0_0,openssl-1_1,openssl1,openssl: Certificate policy check not enabled</issue> <issue tracker="bnc" id="1210060">openssl-3 FTBFS 2023-03-30</issue> <issue tracker="cve" id="2023-0465"/> <issue tracker="cve" id="2023-0466"/> <packager>ohollmann</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for openssl-3</summary> <description>This update for openssl-3 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873). - Update further expiring certificates that affect tests (bsc#1210060) </description> </patchinfo>