Skip to content
OpenAdvisories
High ALSA-2022:1065 1 CVE

Important: openssl security update

Published Mar 28, 2022 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 8 openssl 1:1.1.1k-6.el8_5
AlmaLinux · 8 openssl-devel 1:1.1.1k-6.el8_5
AlmaLinux · 8 openssl-libs 1:1.1.1k-6.el8_5
AlmaLinux · 8 openssl-perl 1:1.1.1k-6.el8_5

Vulnerabilities 1

  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io

References

  • report
    https://vulners.com/cve/CVE-2022-0778