Red Hat Security Advisory

RHSA-2022:1065

openssl security update

Released 2022-03-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1k-6.el8_5, openssl-devel-1:1.1.1k-6.el8_5, openssl-libs-1:1.1.1k-6.el8_5 +1

TI-2022-00687 CVE-2022-0778 · GHSA-x3mh-jvjw-3xwx

HIGH 77

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.73188 Published 2022-03-15 Partial fix · 300.0.5, 111.18.0 CWE-835