Red Hat Security Advisory

RHSA-2022:5818

openssl security update

Released 2022-08-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1k-7.el8_6, openssl-devel-1:1.1.1k-7.el8_6, openssl-libs-1:1.1.1k-7.el8_6 +1

Fixes 3 records

TI-2022-01915 CVE-2022-2068 · GHSA-xjxr-x4h8-946x

The c_rehash script allows command injection

CRITICAL 93

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96391 Published 2022-06-21 Partial fix CWE-78

TI-2022-01176 CVE-2022-1292 · GHSA-qjmp-vmxc-7p8r

The c_rehash script allows command injection

CRITICAL 90

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82612 Published 2022-05-03 Partial fix CWE-78

TI-2022-01940 CVE-2022-2097 · GHSA-3wx7-46ch-7rq2

AES OCB fails to encrypt some bytes

LOW 38

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04899 Published 2022-07-05 Partial fix · 111.22.0, 300.0.9 CWE-327