Red Hat Security Advisory

RHSA-2022:1091

openssl security update

Released 2022-03-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v. 8.2) openssl-1:1.1.1c-19.el8_2, openssl-devel-1:1.1.1c-19.el8_2, openssl-libs-1:1.1.1c-19.el8_2 +1

TI-2022-00687 CVE-2022-0778 · GHSA-x3mh-jvjw-3xwx

HIGH 77

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.73188 Published 2022-03-15 Partial fix · 300.0.5, 111.18.0 CWE-835