Red Hat Security Advisory

RHSA-2022:1112

openssl security update

Released 2022-03-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v. 8.1) openssl-1:1.1.1c-5.el8_1.1, openssl-devel-1:1.1.1c-5.el8_1.1, openssl-libs-1:1.1.1c-5.el8_1.1 +1

TI-2022-00687 CVE-2022-0778 · GHSA-x3mh-jvjw-3xwx

HIGH 77

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.73188 Published 2022-03-15 Partial fix · 300.0.5, 111.18.0 CWE-835