Description
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2), Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n), Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd) | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 1.1.1o-1 | — |
| Debian 13 | openssl | 1.1.1o-1 | — |
| Debian 12 | openssl | 1.1.1o-1 | — |
| Debian 11 | openssl | 1.1.1n-0+deb11u2 | DSA-5139-1 |
| Debian 10 | openssl | 1.1.1n-0+deb10u2 | DSA-5139-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 9 | openssl | 1.1.0l-1~deb9u6 | DLA-3008-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | edk2 | 2022.02-3ubuntu0.22.04.3 | USN-7060-1 |
| Ubuntu 22.04 LTS | nodejs | 12.22.9~dfsg-1ubuntu3.1 | USN-6457-1 |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.1 | USN-5402-1 |
| Ubuntu 20.04 LTS | edk2 | 0~20191122.bd85bf54-2ubuntu3.6 | USN-7060-1 |
| Ubuntu 20.04 LTS | openssl | 1.1.1f-1ubuntu2.13 | USN-5402-1 |
| Ubuntu 18.04 LTS | openssl | 1.1.1-1ubuntu2.1~18.04.17 | USN-5402-1 |
| Ubuntu 18.04 LTS | openssl1.0 | 1.0.2n-1ubuntu5.9 | USN-5402-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | openssl | 1.1.1f-1ubuntu2.fips.13.1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.17 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssl | 1.0.2g-1ubuntu4.fips.4.20.3 | — |
| Ubuntu Pro 18.04 LTS | edk2 | 0~20180205.c0d9813c-2ubuntu0.3+esm2 | USN-7060-1 |
| Ubuntu Pro 16.04 LTS | edk2 | 0~20160408.ffea0a2c-2ubuntu0.2+esm3 | USN-7060-1 |
| Ubuntu Pro 16.04 LTS | openssl | 1.0.2g-1ubuntu4.20+esm3 | USN-5402-2 |
| Ubuntu Pro 14.04 LTS | openssl | 1.0.1f-1ubuntu2.27+esm10 | USN-7018-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | openssl +3 | 1:3.0.1-41.el9_0 | RHSA-2022:6224 |
| RHEL 8 | openssl +3 | 1:1.1.1k-7.el8_6 | RHSA-2022:5818 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Utils 6 | foreman +1 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | foreman +1 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | puppet-agent | 7.26.0-3.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite Capsule 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite Capsule 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | foreman +13 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | foreman-redis | 3.7.0.9-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | puppet-agent | 7.26.0-3.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-actionpack +2 | 6.1.7.3-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-git | 1.18.0-0.1.el8sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | rubygem-globalid | 1.1.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-kubeclient | 4.10.1-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-safemode | 1.3.8-1.el8sat | RHSA-2023:5979 |
| Red Hat Satellite 6 | tfm-rubygem-git | 1.18.0-0.1.el7sat | RHSA-2023:5980 |
| Red Hat Satellite 6 | yggdrasil-worker-forwarder | 0.0.3-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Rhel Satellite Client 6 | foreman_ygg_worker | 0.2.2-1.el7sat | RHSA-2023:5982 |
| Red Hat Rhel Satellite Client 6 | puppet-agent | 7.26.0-3.el6sat | RHSA-2023:5982 |
| Red Hat Rhel Satellite Client 6 | yggdrasil | 0.2.3-1.el7sat | RHSA-2023:5982 |
| Red Hat JBoss Web Server 5 | jws5-tomcat-native | 1.2.31-11.redhat_11.el7jws | RHSA-2022:8917 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-curl +2 | 7.86.0-2.el7jbcs | RHSA-2022:8840 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-httpd +6 | 2.4.51-37.el7jbcs | RHSA-2022:8840 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_http2 | 1.15.19-20.el7jbcs | RHSA-2022:8840 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_ssl +1 | 1:2.4.51-37.el7jbcs | RHSA-2022:8840 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-openssl +4 | 1:1.1.1k-13.el7jbcs | RHSA-2022:8840 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | openssl +3 | 1:3.0.1-41.el9_0 | ALSA-2022:6224 |
| AlmaLinux 8 | openssl +3 | 1:1.1.1k-7.el8_6 | ALSA-2022:5818 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | openssl | 1:1.1.1k-7.el8_6 | RLSA-2022:5818 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.7.1 | SUSE-SU-2022:2308-1 |
| SLES 15 SP4 | openssl-3 | 3.0.1-150400.4.7.1 | SUSE-SU-2022:2306-1 |
| SLES 15 SP3 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 SP3 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLES 15 SP2 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 SP2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLES 15 SP1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 SP1 | openssl-1_1 | 1.1.0i-150100.14.30.1 | SUSE-SU-2022:2068-1 |
| SLES 15 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 | openssl-1_1 | 1.1.0i-150000.4.69.1 | SUSE-SU-2022:2075-1 |
Show 26 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | openssl-1_0_0 | 1.0.2p-3.53.1 | SUSE-SU-2022:2106-1 |
| SLES 12 SP5 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SLES 12 SP4 | openssl-1_0_0 | 1.0.2p-3.53.1 | SUSE-SU-2022:2106-1 |
| SLES 12 SP4 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SLES 12 SP3 | openssl | 1.0.2j-60.80.1 | SUSE-SU-2022:2098-1 |
| SLES 12 SP2 | openssl | 1.0.2j-60.80.1 | SUSE-SU-2022:2098-1 |
| SLES 12 | compat-openssl098 | 0.9.8j-106.36.1 | SUSE-SU-2022:2197-1 |
| SLES for SAP 15 SP2 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES for SAP 15 SP2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLES for SAP 15 SP1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES for SAP 15 SP1 | openssl-1_1 | 1.1.0i-150100.14.30.1 | SUSE-SU-2022:2068-1 |
| SLES for SAP 15 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES for SAP 15 | openssl-1_1 | 1.1.0i-150000.4.69.1 | SUSE-SU-2022:2075-1 |
| SLES for SAP 12 SP5 | compat-openssl098 | 0.9.8j-106.36.1 | SUSE-SU-2022:2197-1 |
| SLES for SAP 12 SP5 | openssl-1_0_0 | 1.0.2p-3.53.1 | SUSE-SU-2022:2106-1 |
| SLES for SAP 12 SP5 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SLES for SAP 12 SP4 | compat-openssl098 | 0.9.8j-106.36.1 | SUSE-SU-2022:2197-1 |
| SLES for SAP 12 SP4 | openssl-1_0_0 | 1.0.2p-3.53.1 | SUSE-SU-2022:2106-1 |
| SLES for SAP 12 SP4 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SLES for SAP 12 SP3 | compat-openssl098 | 0.9.8j-106.36.1 | SUSE-SU-2022:2197-1 |
| SLES for SAP 12 SP3 | openssl | 1.0.2j-60.80.1 | SUSE-SU-2022:2098-1 |
| SLE Micro 5.2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLE Micro 5.1 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLE HPC 15 SP2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLE HPC 15 SP1 | openssl-1_1 | 1.1.0i-150100.14.30.1 | SUSE-SU-2022:2068-1 |
| SLE HPC 15 | openssl-1_1 | 1.1.0i-150000.4.69.1 | SUSE-SU-2022:2075-1 |
| SUSE OpenStack Cloud Crowbar 9 | openssl-1_0_0 | 1.0.2p-3.53.1 | SUSE-SU-2022:2106-1 |
| SUSE OpenStack Cloud Crowbar 9 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SUSE OpenStack Cloud Crowbar 8 | openssl | 1.0.2j-60.80.1 | SUSE-SU-2022:2098-1 |
| SUSE OpenStack Cloud 9 | openssl-1_0_0 | 1.0.2p-3.53.1 | SUSE-SU-2022:2106-1 |
| SUSE OpenStack Cloud 9 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SUSE OpenStack Cloud 8 | openssl | 1.0.2j-60.80.1 | SUSE-SU-2022:2098-1 |
| SUSE Manager Server 4.1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Manager Server 4.1 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SUSE Manager Retail Branch Server 4.1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Manager Retail Branch Server 4.1 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SUSE Manager Proxy 4.1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Manager Proxy 4.1 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SUSE HPE Helion OpenStack 8 | openssl | 1.0.2j-60.80.1 | SUSE-SU-2022:2098-1 |
| SUSE Enterprise Storage 7 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Enterprise Storage 7 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SUSE Enterprise Storage 6 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Enterprise Storage 6 | openssl-1_1 | 1.1.0i-150100.14.30.1 | SUSE-SU-2022:2068-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-1_0_0 | 1.0.2u-9.1 | openSUSE-SU-2024:12178-1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1o-1.1 | openSUSE-SU-2024:12138-1 |
| openSUSE Tumbleweed | openssl-3 | 3.0.5-1.1 | openSUSE-SU-2024:12204-1 |
| openSUSE Leap 15.4 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| openSUSE Leap 15.4 | openssl-1_1 | 1.1.1l-150400.7.7.1 | SUSE-SU-2022:2308-1 |
| openSUSE Leap 15.4 | openssl-3 | 3.0.1-150400.4.7.1 | SUSE-SU-2022:2306-1 |
| openSUSE Leap 15.3 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| openSUSE Leap 15.3 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-2 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssl +3 | 1:3.0.5-1.amzn2023.0.4 | ALAS2023-2023-051 |
| Amazon Linux 2 | edk2-ovmf +4 | 20200801stable-1.amzn2.0.5 | ALAS2-2024-2502 |
| Amazon Linux 2 | openssl +4 | 1:1.0.2k-24.amzn2.0.3 | ALAS2-2022-1801 |
| Amazon Linux 2 | openssl11 +3 | 1:1.1.1g-12.amzn2.0.8 | ALAS2-2022-1815 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | hvloader | 1.0.1-2 | — |
| Azure Linux 2 (CBL-Mariner) | openssl | 1.1.1k-15 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | openssl +3 | 1:3.0.1-41.0.1.el9_0 | ELSA-2022-6224 |
| Oracle Linux 8 | openssl +3 | 1:1.1.1k-7.el8_6 | ELSA-2022-5818 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 5 repositories
-
alcaparra/CVE-2022-1292 ★ 28 · May 30, 2022
CVE-2022-1292 OpenSSL c_rehash Vulnerability - POC
-
und3sc0n0c1d0/CVE-2022-1292 ★ 7 · Sep 13, 2022
Automation to validate the impact of the vulnerability CVE-2022-1292 on a specific system.
-
greek0x0/CVE-2022-1292 ★ 6 · Sep 1, 2022
OpenSSL
-
rama291041610/CVE-2022-1292 ★ 5 · May 30, 2022
CVE-2022-1292 OpenSSL c_rehash Vulnerability
-
li8u99/CVE-2022-1292 ★ 4 · May 24, 2022
CVE-2022-1292
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- ALSA-2022:6224 Moderate: openssl security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:5818 Moderate: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2023:6818 Red Hat Security Advisory: Satellite 6.14 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5982 Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5980 Red Hat Security Advisory: Satellite 6.11.5.6 async security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5979 Red Hat Security Advisory: Satellite 6.12.5.2 Async Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5931 Red Hat Security Advisory: Satellite 6.13.5 Async Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2022:8917 Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.1 release and security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2022:8840 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP1 security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2022:6224 Red Hat Security Advisory: openssl security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2022:5818 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
- SSA-794697 SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1 Siemens ProductCERT · Oct 13, 2026
- WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- USN-7018-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
- USN-7060-1 edk2 vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-5402-2 openssl vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-6457-1 nodejs vulnerabilities Ubuntu Security Notices (USN) · May 25, 2026
- WID-SEC-2022-0735 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 19, 2026
- USN-5402-1 openssl, openssl1.0 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-5139-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3008-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2022-0071 OpenSSL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 9, 2026
- RLSA-2022:5818 Moderate: openssl security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2022:2098-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2308-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2068-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2075-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2251-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2106-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2197-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12138-1 libopenssl-1_1-devel-1.1.1o-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2251-2 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2182-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12204-1 libopenssl-3-devel-3.0.5-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2321-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-1186 IBM DB2 REST: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
- WID-SEC-2023-2723 Red Hat Satellite: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 14, 2025
- WID-SEC-2023-1424 Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2025
- ALAS2-2024-2502 Important: edk2 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Sep 23, 2025
- ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025
- openSUSE-SU-2024:12178-1 libopenssl-1_0_0-devel-1.0.2u-9.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ICSA-23-194-01 Siemens RUGGEDCOM ROX CISA ICS & IT advisories · May 6, 2025
- SUSE-SU-2022:2306-1 Security update for openssl-3 SUSE / openSUSE Security Updates · May 2, 2025
- ICSA-23-166-11 Siemens SIMATIC S7-1500 TM MFP Linux Kernel CISA ICS & IT advisories · Apr 9, 2024
- SSA-146325 SSA-146325: Multiple Vulnerabilities in RUGGEDCOM ROX before V2.16 Siemens ProductCERT · Jul 11, 2023
- WID-SEC-2023-1021 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 29, 2023
- WID-SEC-2023-1432 Siemens SIMATIC S7: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 22, 2023
- WID-SEC-2022-1461 IBM Spectrum Protect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 20, 2023
- SSA-942865 SSA-942865: Multiple Vulnerabilities in the Integrated SCALANCE S615 of SINAMICS Medium Voltage Products Siemens ProductCERT · Jun 14, 2023
References
- https://www.openssl.org/news/secadv/20220503.txt
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb
- [debian-lts-announce] 20220515 [SECURITY] [DLA 3008-1] openssl security update mailing-list
- DSA-5139 vendor-advisory
- FEDORA-2022-b651cb69e6 vendor-advisory
- FEDORA-2022-c9c02865f6 vendor-advisory
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://security.netapp.com/advisory/ntap-20220602-0009/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011
- https://security.netapp.com/advisory/ntap-20220729-0004/
- GLSA-202210-02 vendor-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf