[ELSA-2022-4899] compat-openssl11 security and bug fix update

Severity Important

Affected Packages 1

CVEs 1

[1:1.1.1k-4.0.1]
- Backport upstream PRs 18446 and 18481 which update
certificates used for the self-tests [Orabug: 34326055]

[1:1.1.1k-4]
- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
Resolves: rhbz#2063147
- Disable FIPS mode; it does not work and will not be certified
Resolves: rhbz#2091968

Package	Affected Version
pkg:rpm/oraclelinux/compat-openssl11?distro=oraclelinux-9.0	< 1.1.1k-4.0.1.el9_0

ID

ELSA-2022-4899

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2022-4899.html

Published

2022-06-30T00:00:00
(2 years ago)

Modified

2022-06-30T00:00:00
(2 years ago)

Rights

Other Advisories

Source	# ID	Name	URL
elsa	ELSA-2022-4899		https://linux.oracle.com/errata/ELSA-2022-4899.html
CVE	CVE-2022-0778		https://linux.oracle.com/cve/CVE-2022-0778.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:rpm/oraclelinux/compat-openssl11?distro=oraclelinux-9.0	oraclelinux	compat-openssl11	< 1.1.1k-4.0.1.el9_0	oraclelinux-9.0

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date