Description
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3), Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o), Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze) | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.0.4-1 | — |
| Debian 13 | openssl | 3.0.4-1 | — |
| Debian 12 | openssl | 3.0.4-1 | — |
| Debian 11 | openssl | 1.1.1n-0+deb11u3 | DSA-5169-1 |
| Debian 10 | openssl | 1.1.1n-0+deb10u3 | DSA-5169-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | nodejs | 12.22.9~dfsg-1ubuntu3.1 | USN-6457-1 |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.5 | USN-5488-1 |
| Ubuntu 20.04 LTS | openssl | 1.1.1f-1ubuntu2.15 | USN-5488-1 |
| Ubuntu 18.04 LTS | openssl | 1.1.1-1ubuntu2.1~18.04.19 | USN-5488-1 |
| Ubuntu 18.04 LTS | openssl1.0 | 1.0.2n-1ubuntu5.10 | USN-5488-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | openssl | 1.1.1f-1ubuntu2.fips.16 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.20 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssl | 1.0.2g-1ubuntu4.fips.4.20.3 | — |
| Ubuntu Pro 16.04 LTS | edk2 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | openssl | 1.0.2g-1ubuntu4.20+esm5 | USN-5488-2 |
| Ubuntu Pro 14.04 LTS | openssl | 1.0.1f-1ubuntu2.27+esm10 | USN-7018-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | openssl +3 | 1:3.0.1-41.el9_0 | RHSA-2022:6224 |
| RHEL 8 | openssl +3 | 1:1.1.1k-7.el8_6 | RHSA-2022:5818 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Utils 6 | foreman +1 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | foreman +1 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | puppet-agent | 7.26.0-3.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite Capsule 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite Capsule 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | foreman +13 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | foreman-redis | 3.7.0.9-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | puppet-agent | 7.26.0-3.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-actionpack +2 | 6.1.7.3-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-git | 1.18.0-0.1.el8sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | rubygem-globalid | 1.1.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-kubeclient | 4.10.1-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-safemode | 1.3.8-1.el8sat | RHSA-2023:5979 |
| Red Hat Satellite 6 | tfm-rubygem-git | 1.18.0-0.1.el7sat | RHSA-2023:5980 |
| Red Hat Satellite 6 | yggdrasil-worker-forwarder | 0.0.3-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Rhel Satellite Client 6 | foreman_ygg_worker | 0.2.2-1.el7sat | RHSA-2023:5982 |
| Red Hat Rhel Satellite Client 6 | puppet-agent | 7.26.0-3.el6sat | RHSA-2023:5982 |
| Red Hat Rhel Satellite Client 6 | yggdrasil | 0.2.3-1.el7sat | RHSA-2023:5982 |
| Red Hat JBoss Web Server 5 | jws5-tomcat-native | 1.2.31-11.redhat_11.el7jws | RHSA-2022:8917 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-curl +2 | 7.86.0-2.el7jbcs | RHSA-2022:8840 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-httpd +6 | 2.4.51-37.el7jbcs | RHSA-2022:8840 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_http2 | 1.15.19-20.el7jbcs | RHSA-2022:8840 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_ssl +1 | 1:2.4.51-37.el7jbcs | RHSA-2022:8840 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-openssl +4 | 1:1.1.1k-13.el7jbcs | RHSA-2022:8840 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | openssl +3 | 1:3.0.1-41.el9_0 | ALSA-2022:6224 |
| AlmaLinux 8 | openssl +3 | 1:1.1.1k-7.el8_6 | ALSA-2022:5818 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | openssl | 1:1.1.1k-7.el8_6 | RLSA-2022:5818 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.7.1 | SUSE-SU-2022:2308-1 |
| SLES 15 SP4 | openssl-3 | 3.0.1-150400.4.7.1 | SUSE-SU-2022:2306-1 |
| SLES 15 SP3 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 SP3 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLES 15 SP2 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 SP2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLES 15 SP1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 SP1 | openssl-1_1 | 1.1.0i-150100.14.33.1 | SUSE-SU-2022:2179-1 |
| SLES 15 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES 15 | openssl-1_1 | 1.1.0i-150000.4.74.1 | SUSE-SU-2022:2309-1 |
Show 26 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | openssl-1_0_0 | 1.0.2p-3.56.1 | SUSE-SU-2022:2181-1 |
| SLES 12 SP5 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SLES 12 SP4 | openssl-1_0_0 | 1.0.2p-3.56.1 | SUSE-SU-2022:2181-1 |
| SLES 12 SP4 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SLES 12 SP3 | openssl | 1.0.2j-60.83.1 | SUSE-SU-2022:2180-1 |
| SLES 12 SP2 | openssl | 1.0.2j-60.83.1 | SUSE-SU-2022:2180-1 |
| SLES 12 | compat-openssl098 | 0.9.8j-106.36.1 | SUSE-SU-2022:2197-1 |
| SLES for SAP 15 SP2 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES for SAP 15 SP2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLES for SAP 15 SP1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES for SAP 15 SP1 | openssl-1_1 | 1.1.0i-150100.14.33.1 | SUSE-SU-2022:2179-1 |
| SLES for SAP 15 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SLES for SAP 15 | openssl-1_1 | 1.1.0i-150000.4.74.1 | SUSE-SU-2022:2309-1 |
| SLES for SAP 12 SP5 | compat-openssl098 | 0.9.8j-106.36.1 | SUSE-SU-2022:2197-1 |
| SLES for SAP 12 SP5 | openssl-1_0_0 | 1.0.2p-3.56.1 | SUSE-SU-2022:2181-1 |
| SLES for SAP 12 SP5 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SLES for SAP 12 SP4 | compat-openssl098 | 0.9.8j-106.36.1 | SUSE-SU-2022:2197-1 |
| SLES for SAP 12 SP4 | openssl-1_0_0 | 1.0.2p-3.56.1 | SUSE-SU-2022:2181-1 |
| SLES for SAP 12 SP4 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SLES for SAP 12 SP3 | compat-openssl098 | 0.9.8j-106.36.1 | SUSE-SU-2022:2197-1 |
| SLES for SAP 12 SP3 | openssl | 1.0.2j-60.83.1 | SUSE-SU-2022:2180-1 |
| SLE Micro 5.2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLE Micro 5.1 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLE HPC 15 SP2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SLE HPC 15 SP1 | openssl-1_1 | 1.1.0i-150100.14.33.1 | SUSE-SU-2022:2179-1 |
| SLE HPC 15 | openssl-1_1 | 1.1.0i-150000.4.74.1 | SUSE-SU-2022:2309-1 |
| SUSE OpenStack Cloud Crowbar 9 | openssl-1_0_0 | 1.0.2p-3.56.1 | SUSE-SU-2022:2181-1 |
| SUSE OpenStack Cloud Crowbar 9 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SUSE OpenStack Cloud Crowbar 8 | openssl | 1.0.2j-60.83.1 | SUSE-SU-2022:2180-1 |
| SUSE OpenStack Cloud 9 | openssl-1_0_0 | 1.0.2p-3.56.1 | SUSE-SU-2022:2181-1 |
| SUSE OpenStack Cloud 9 | openssl-1_1 | 1.1.1d-2.66.1 | SUSE-SU-2022:2182-1 |
| SUSE OpenStack Cloud 8 | openssl | 1.0.2j-60.83.1 | SUSE-SU-2022:2180-1 |
| SUSE Manager Server 4.1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Manager Server 4.1 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SUSE Manager Retail Branch Server 4.1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Manager Retail Branch Server 4.1 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SUSE Manager Proxy 4.1 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Manager Proxy 4.1 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SUSE HPE Helion OpenStack 8 | openssl | 1.0.2j-60.83.1 | SUSE-SU-2022:2180-1 |
| SUSE Enterprise Storage 7 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Enterprise Storage 7 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
| SUSE Enterprise Storage 6 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| SUSE Enterprise Storage 6 | openssl-1_1 | 1.1.0i-150100.14.33.1 | SUSE-SU-2022:2179-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | grype | 0.92.1-1.1 | openSUSE-SU-2025:15136-1 |
| openSUSE Tumbleweed | openssl-1_0_0 | 1.0.2u-9.1 | openSUSE-SU-2024:12178-1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1p-1.1 | openSUSE-SU-2024:12159-1 |
| openSUSE Leap 15.4 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| openSUSE Leap 15.4 | openssl-1_1 | 1.1.1l-150400.7.7.1 | SUSE-SU-2022:2308-1 |
| openSUSE Leap 15.4 | openssl-3 | 3.0.1-150400.4.7.1 | SUSE-SU-2022:2306-1 |
| openSUSE Leap 15.3 | openssl-1_0_0 | 1.0.2p-150000.3.56.1 | SUSE-SU-2022:2321-1 |
| openSUSE Leap 15.3 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.2 | openssl-1_1 | 1.1.1d-150200.11.48.1 | SUSE-SU-2022:2251-2 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssl +3 | 1:3.0.5-1.amzn2023.0.4 | ALAS2023-2023-051 |
| Amazon Linux 2 | edk2-ovmf +4 | 20200801stable-1.amzn2.0.5 | ALAS2-2024-2502 |
| Amazon Linux 2 | openssl +4 | 1:1.0.2k-24.amzn2.0.4 | ALAS2-2022-1831 |
| Amazon Linux 2 | openssl11 +3 | 1:1.1.1g-12.amzn2.0.9 | ALAS2-2022-1832 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | openssl | 1.1.1k-17 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | openssl +3 | 1:3.0.1-41.0.1.el9_0 | ELSA-2022-6224 |
| Oracle Linux 8 | openssl +3 | 1:1.1.1k-7.el8_6 | ELSA-2022-5818 |
Advisories 50
- ALSA-2022:6224 Moderate: openssl security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:5818 Moderate: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2023:6818 Red Hat Security Advisory: Satellite 6.14 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5982 Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5980 Red Hat Security Advisory: Satellite 6.11.5.6 async security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5979 Red Hat Security Advisory: Satellite 6.12.5.2 Async Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5931 Red Hat Security Advisory: Satellite 6.13.5 Async Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2022:8917 Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.1 release and security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2022:8840 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP1 security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2022:6224 Red Hat Security Advisory: openssl security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2022:5818 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
- SSA-794697 SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1 Siemens ProductCERT · Oct 13, 2026
- WID-SEC-2024-3195 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- WID-SEC-2024-0054 IBM Security Verify Access: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 16, 2026
- USN-7018-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
- USN-5488-2 openssl vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-6457-1 nodejs vulnerabilities Ubuntu Security Notices (USN) · May 25, 2026
- USN-5488-1 openssl, openssl1.0 vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-5169-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2022-0425 OpenSSL: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Feb 9, 2026
- RLSA-2022:5818 Moderate: openssl security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2022:2308-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2180-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2309-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2251-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2181-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12159-1 libopenssl-1_1-devel-1.1.1p-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2197-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2251-2 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2182-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2179-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2321-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-1186 IBM DB2 REST: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
- WID-SEC-2023-2723 Red Hat Satellite: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 14, 2025
- ALAS2-2024-2502 Important: edk2 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Sep 23, 2025
- ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025
- openSUSE-SU-2025:15136-1 grype-0.92.1-1.1 on GA media SUSE / openSUSE Security Updates · May 22, 2025
- openSUSE-SU-2024:12178-1 libopenssl-1_0_0-devel-1.0.2u-9.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ICSA-23-194-01 Siemens RUGGEDCOM ROX CISA ICS & IT advisories · May 6, 2025
- SUSE-SU-2022:2306-1 Security update for openssl-3 SUSE / openSUSE Security Updates · May 2, 2025
- NCSC-2024-0414 Kwetsbaarheden verholpen in Oracle Communications NCSC-NL (Netherlands) · Oct 17, 2024
- ICSA-23-166-11 Siemens SIMATIC S7-1500 TM MFP Linux Kernel CISA ICS & IT advisories · Apr 9, 2024
- WID-SEC-2023-1969 HPE Fabric OS: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Aug 6, 2023
- SSA-146325 SSA-146325: Multiple Vulnerabilities in RUGGEDCOM ROX before V2.16 Siemens ProductCERT · Jul 11, 2023
- WID-SEC-2023-1432 Siemens SIMATIC S7: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 22, 2023
- WID-SEC-2022-1461 IBM Spectrum Protect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 20, 2023
- ALAS2023-2023-051 Important: openssl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 22, 2023
- ICSA-23-017-03 Siemens SINEC INS CISA ICS & IT advisories · Jan 10, 2023
References
- https://www.openssl.org/news/secadv/20220621.txt
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9
- DSA-5169 vendor-advisory
- FEDORA-2022-3b7d0abd0b vendor-advisory
- https://security.netapp.com/advisory/ntap-20220707-0008/
- FEDORA-2022-41890e9e44 vendor-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf