Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
OpenSSL Update for Red Hat Linux: Potential Encryption Key Leak
published 2 years ago
Summary
OpenSSL, a widely used encryption library, has been updated to fix a potential issue where sensitive information could be leaked. This affects Red Hat Linux systems that use OpenSSL. To ensure the security of your system, update OpenSSL to the latest version.
What to do
- Update redhat openssl to version 0:1.0.1e-60.el6_10.
- Update redhat openssl-debuginfo to version 0:1.0.1e-60.el6_10.
- Update redhat openssl-devel to version 0:1.0.1e-60.el6_10.
- Update redhat openssl-perl to version 0:1.0.1e-60.el6_10.
- Update redhat openssl-static to version 0:1.0.1e-60.el6_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_els:6 | redhat | openssl |
< 0:1.0.1e-60.el6_10 Fix: upgrade to 0:1.0.1e-60.el6_10
|
| Red Hat:rhel_els:6 | redhat | openssl-debuginfo |
< 0:1.0.1e-60.el6_10 Fix: upgrade to 0:1.0.1e-60.el6_10
|
| Red Hat:rhel_els:6 | redhat | openssl-devel |
< 0:1.0.1e-60.el6_10 Fix: upgrade to 0:1.0.1e-60.el6_10
|
| Red Hat:rhel_els:6 | redhat | openssl-perl |
< 0:1.0.1e-60.el6_10 Fix: upgrade to 0:1.0.1e-60.el6_10
|
| Red Hat:rhel_els:6 | redhat | openssl-static |
< 0:1.0.1e-60.el6_10 Fix: upgrade to 0:1.0.1e-60.el6_10
|
Original advisory text
Red Hat Security Advisory: openssl security update
References
- https://access.redhat.com/errata/RHSA-2022:1073 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2062202 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1073.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-0778 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-0778 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-0778 Vendor Advisory
- https://www.openssl.org/news/secadv/20220315.txt Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Sep 2024
Updated29 May 2026
First seen29 May 2026
Sources
RHSA-2022:1073 · OSV
Track software like this
Free during beta