Red Hat Security Advisory

RHSA-2022:1071

openssl security update

Released 2022-03-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.4) openssl-1:1.1.1g-16.el8_4, openssl-devel-1:1.1.1g-16.el8_4, openssl-libs-1:1.1.1g-16.el8_4 +1

TI-2022-00687 CVE-2022-0778 · GHSA-x3mh-jvjw-3xwx

HIGH 77

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.73188 Published 2022-03-15 Partial fix · 300.0.5, 111.18.0 CWE-835