Red Hat Security AdvisoryRHSA-2022:1077
openssl security update
Released 2022-03-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.7) openssl-1:1.0.2k-21.el7_7, openssl-devel-1:1.0.2k-21.el7_7, openssl-libs-1:1.0.2k-21.el7_7
- Red Hat Enterprise Linux Server E4S (v. 7.7) openssl-1:1.0.2k-21.el7_7, openssl-devel-1:1.0.2k-21.el7_7, openssl-libs-1:1.0.2k-21.el7_7
- Red Hat Enterprise Linux Server Optional AUS (v. 7.7) openssl-perl-1:1.0.2k-21.el7_7, openssl-static-1:1.0.2k-21.el7_7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.7) openssl-perl-1:1.0.2k-21.el7_7, openssl-static-1:1.0.2k-21.el7_7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.7) openssl-perl-1:1.0.2k-21.el7_7, openssl-static-1:1.0.2k-21.el7_7
- Red Hat Enterprise Linux Server TUS (v. 7.7) openssl-1:1.0.2k-21.el7_7, openssl-devel-1:1.0.2k-21.el7_7, openssl-libs-1:1.0.2k-21.el7_7
Fixes 1 record
Priority HIGH 77
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.73188 · Published 2022-03-15 · Partial fix · 300.0.5, 111.18.0 CWE-835
