Every CVE Search/ Get API key

CVE-2022-1292

The c_rehash script allows command injection

7.3 HighPublic exploitFix available

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

82.6%Up 81.5 points since May 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.3

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
CVE-2022-1292
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-78
Updated
2026-11-04
CVE List 9.8

The c_rehash script allows command injection

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
CVE-2022-1292
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-04
EUVDEUVD-2022-24621 9.8

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
EUVD-2022-24621
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-qjmp-vmxc-7p8r 9.8

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection....

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
GHSA-qjmp-vmxc-7p8r
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
OSVALPINE-CVE-2022-1292 7.3

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
ALPINE-CVE-2022-1292
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-41748 9.8

CVE-2022-1292 affecting package hvloader for versions less than 1.0.1-2

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
AZL-41748
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 46 moreShow less
OSVAZL-9649 9.8

CVE-2022-1292 affecting package openssl for versions less than 1.1.1k-15

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
AZL-9649
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2022-1292 7.3

CVE-2022-1292 does not affect BellSoft software

Record
BELL-CVE-2022-1292
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

The c_rehash script allows command injection

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
CVE-2022-1292
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-1292 7.3

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
DEBIAN-CVE-2022-1292
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVJLSEC-2026-228 7.3

The `c_rehash` script does not properly sanitise shell metacharacters to prevent command injection

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
JLSEC-2026-228
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 CriticalAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
OSVOESA-2022-1673 9.8

openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

Security Fix(es):

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).(CVE-2022-1292)

Record
OESA-2022-1673
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-1898 7.5

intel-sgx-ssl security update

The Intel® Software Guard Extensions SSL (Intel® SGX SSL) cryptographic library is intended to provide cryptographic services for Intel® Software Guard Extensions (SGX) enclave applications. The Intel® SGX SSL cryptographic library is based on the underlying OpenSSL* Open Source project, providing a full-strength general purpose cryptography library. Supported OpenSSL version is 1.1.1l.

Security Fix(es):

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).(CVE-2022-1292)

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).(CVE-2022-2068)

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).(CVE-2022-2097)

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the…

Record
OESA-2022-1898
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2022-1951 6.7

linux-sgx security update

Intel(R) Software Guard Extensions (Intel(R) SGX) is an Intel technology for application developers seeking to protect select code and data from disclosure or modification.

Security Fix(es):

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).(CVE-2022-1292)

Record
OESA-2022-1951
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:5818 6.7

Red Hat Security Advisory: openssl security update

Record
RHSA-2022:5818
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:6224 7.5

Red Hat Security Advisory: openssl security and bug fix update

Record
RHSA-2022:6224
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:8840 9.8

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP1 security update

Record
RHSA-2022:8840
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:8917 6.7

Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.1 release and security update

Record
RHSA-2022:8917
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5931 9.8

Red Hat Security Advisory: Satellite 6.13.5 Async Security Update

Record
RHSA-2023:5931
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5979 9.1

Red Hat Security Advisory: Satellite 6.12.5.2 Async Security Update

Record
RHSA-2023:5979
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5980 9.1

Red Hat Security Advisory: Satellite 6.11.5.6 async security update

Record
RHSA-2023:5980
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5982 7.5

Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update

Record
RHSA-2023:5982
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:6818 9.8

Red Hat Security Advisory: Satellite 6.14 security and bug fix update

Record
RHSA-2023:6818
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:5818 6.7

Moderate: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: c_rehash script allows command injection (CVE-2022-1292)

  • openssl: the c_rehash script allows command injection (CVE-2022-2068)

  • openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:5818
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-1292 9.8

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Record
UBUNTU-CVE-2022-1292
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2022:5818 No score

Moderate: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es):

  • openssl: c_rehash script allows command injection (CVE-2022-1292)
  • openssl: the c_rehash script allows command injection (CVE-2022-2068)
  • openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Record
ALSA-2022:5818
Updated
2026-11-02
OSVALSA-2022:6224 No score

Moderate: openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es):

  • openssl: c_rehash script allows command injection (CVE-2022-1292)
  • openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS (CVE-2022-1343)
  • openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473)
  • openssl: the c_rehash script allows command injection (CVE-2022-2068)
  • openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es):
  • openssl occasionally sends internal error to gnutls when using FFDHE (BZ#2080323)
  • openssl req defaults to 3DES (BZ#2085499)
  • OpenSSL accepts custom elliptic curve parameters when p is large [almalinux-9] (BZ#2085508)
  • OpenSSL mustn't work with ECDSA with explicit curve parameters in FIPS mode (BZ#2085521)
  • openssl s_server -groups secp256k1 in FIPS fails because X25519/X448 (BZ#2086554)
  • Converting FIPS power-on self test to KAT (BZ#2086866)
  • Small RSA keys work for some operations in FIPS mode (BZ#2091938)
  • FIPS provider doesn't block RSA encryption for key transport (BZ#2091977)
  • OpenSSL testsuite certificates expired (BZ#2095696)
  • [IBM 9.1 HW OPT] POWER10 performance enhancements for cryptography: OpenSSL (BZ#2103044)
  • [FIPS lab review] self-test (BZ#2112978)
  • [FIPS lab review] DH tuning (BZ#2115856)
  • [FIPS lab review] EC tuning (BZ#2115857)
  • [FIPS lab review] RSA tuning (BZ#2115858)
  • [FIPS lab review] RAND tuning (BZ#2115859)
  • [FIPS lab review] zeroization (BZ#2115861)
  • [FIPS lab review] HKDF limitations (BZ#2118388)
Record
ALSA-2022:6224
Updated
2026-11-02
OSVCLSA-2022-1654011190 No score

Fix CVE(s): CVE-2022-1473, CVE-2022-1292

  • SECURITY UPDATE: Improper Neutralization
    • debian/patches/CVE-2022-1292.patch: restrict using shell to invoke openssl due to possible privilege escalation
    • debian/patches/CVE-2022-1473.patch: fix bug OPENSSL_LH_flush() memory releasing leading to DoS
    • CVE-2022-1292
    • CVE-2022-1473
Record
CLSA-2022-1654011190
Updated
2026-11-02
OSVCLSA-2022-1657814965 No score

Fix CVE(s): CVE-2022-1473, CVE-2022-1292, CVE-2022-2068

  • SECURITY REGRESSION: Invalid fix for CVE-2022-1473
    • debian/patches/CVE-2022-1473.patch: removing unnecessary patch since this version is actually not affected
  • SECURITY UPDATE: c_rehash script allows command injection
    • debian/patches/CVE-2022-1292.patch: switch to upstream patch, and apply it before c_rehash-compat.patch
    • debian/patches/CVE-2022-2068.patch: fix file operations in tools/c_rehash.in
    • debian/patches/c_rehash-compat.patch: updated patch to apply after the security updates
    • CVE-2022-2068
Record
CLSA-2022-1657814965
Updated
2026-11-02
OSVCLSA-2022-1657816312 No score

Fixed CVEs in openssl: CVE-2022-2068, CVE-2022-1292

  • CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent command injection
  • CVE-2022-2068: c_rehash: Fix file operations to prevent command injection
Record
CLSA-2022-1657816312
Updated
2026-11-02
OSVCLSA-2022-1657816793 No score

Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068

  • CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent command injection
  • CVE-2022-2068: c_rehash: Fix file operations to prevent command injection
  • Update expired SCT certificates
Record
CLSA-2022-1657816793
Updated
2026-11-02
OSVCLSA-2022-1657817606 No score

Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068

  • CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent command injection
  • CVE-2022-2068: c_rehash: Fix file operations to prevent command injection
Record
CLSA-2022-1657817606
Updated
2026-11-02
OSVCLSA-2022-1658171496 No score

Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068

  • CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent command injection
  • CVE-2022-2068: c_rehash: Fix file operations to prevent command injection
  • Update expired SCT certificates
Record
CLSA-2022-1658171496
Updated
2026-11-02
OSVCLSA-2024-1719925589 No score

openssl: Fix of 2 CVEs

  • CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent command injection
  • CVE-2022-2068: c_rehash: Fix file operations to prevent command injection
  • Update expired smime certificates
  • Add testing using old certificates (sha1) to have both types of certificates (sha1, sha256) checked with S/MIME
Record
CLSA-2024-1719925589
Updated
2026-11-02
OSVMGASA-2022-0173 No score

Updated openssl packages fix security vulnerability

The c_rehash script allows command injection. (CVE-2022-1292)

Record
MGASA-2022-0173
Updated
2026-11-02
OSVopenSUSE-SU-2024:12138-1 No score

libopenssl-1_1-devel-1.1.1o-1.1 on GA media

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1o-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12138-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12178-1 No score

libopenssl-1_0_0-devel-1.0.2u-9.1 on GA media

These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-9.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12178-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12204-1 No score

libopenssl-3-devel-3.0.5-1.1 on GA media

These are all security issues fixed in the libopenssl-3-devel-3.0.5-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12204-1
Updated
2026-11-02
OSVRLSA-2023:6818 No score

Important: Satellite 6.14 security and bug fix update

Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool.

Security Fix(es):

  • golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)

  • HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

  • GitPython: Insecure non-multi options in clone and clone_from is not blocked (CVE-2023-40267)

  • kubeclient: kubeconfig parsing error can lead to MITM attacks (CVE-2022-0759)

  • foreman: OS command injection via ct_command and fcct_command (CVE-2022-3874)

  • ruby-git: code injection vulnerability (CVE-2022-46648)

  • ruby-git: code injection vulnerability (CVE-2022-47318)

  • Foreman: Arbitrary code execution through templates (CVE-2023-0118)

  • rubygem-activerecord: SQL Injection (CVE-2023-22794)

  • openssl: c_rehash script allows command injection (CVE-2022-1292)

  • openssl: the c_rehash script allows command injection (CVE-2022-2068)

  • Pulp:Tokens stored in plaintext (CVE-2022-3644)

  • satellite: Blind SSRF via Referer header (CVE-2022-4130)

  • python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server (CVE-2022-40899)

  • golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

  • rubygem-activerecord: Denial of Service (CVE-2022-44566)

  • rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44570)

  • rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44571)

  • rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44572)

  • Foreman: Stored cross-site scripting in host tab (CVE-2023-0119)

  • puppet: Puppet Server ReDoS (CVE-2023-1894)

  • rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22792)

  • rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22795)

  • rubygem-activesupport: Regular Expression Denial of Service (CVE-2023-22796)

  • rubygem-globalid: ReDoS vulnerability (CVE-2023-22799)

  • rubygem-rack: Denial of service in Multipart MIME parsing (CVE-2023-27530)

  • rubygem-rack: denial of service in header parsing (CVE-2023-27539)

  • golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

  • sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) (CVE-2023-30608)

  • python-django: Potential bypass of validation when uploading multiple files using one form field (CVE-2023-31047)

  • python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

  • python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator (CVE-2023-36053)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document linked to in the References section.

Record
RLSA-2023:6818
Updated
2026-11-02
OSVSUSE-SU-2022:2068-1 No score

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
Record
SUSE-SU-2022:2068-1
Updated
2026-11-02
OSVSUSE-SU-2022:2075-1 No score

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
Record
SUSE-SU-2022:2075-1
Updated
2026-11-02
OSVSUSE-SU-2022:2098-1 No score

Security update for openssl

This update for openssl fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
Record
SUSE-SU-2022:2098-1
Updated
2026-11-02
OSVSUSE-SU-2022:2106-1 No score

Security update for openssl-1_0_0

This update for openssl-1_0_0 fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
Record
SUSE-SU-2022:2106-1
Updated
2026-11-02
OSVSUSE-SU-2022:2182-1 No score

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
  • CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
Record
SUSE-SU-2022:2182-1
Updated
2026-11-02
OSVSUSE-SU-2022:2197-1 No score

Security update for openssl-1_0_0

This update for openssl-1_0_0 fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
  • CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
Record
SUSE-SU-2022:2197-1
Updated
2026-11-02
OSVSUSE-SU-2022:2251-1 No score

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
  • CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
Record
SUSE-SU-2022:2251-1
Updated
2026-11-02
OSVSUSE-SU-2022:2251-2 No score

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
  • CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
Record
SUSE-SU-2022:2251-2
Updated
2026-11-02
OSVSUSE-SU-2022:2306-1 No score

Security update for openssl-3

This update for openssl-3 fixes the following issues:

  • CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
  • CVE-2022-1292: Properly sanitise shell metacharacters in c_rehash script. (bsc#1199166)
  • CVE-2022-1343: Fixed incorrect signature verification in OCSP_basic_verify (bsc#1199167).
  • CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).
  • CVE-2022-1434: Fixed incorrect MAC key used in the RC4-MD5 ciphersuite (bsc#1199168).
  • CVE-2022-1473: Fixed resource leakage when decoding certificates and keys (bsc#1199169).
Record
SUSE-SU-2022:2306-1
Updated
2026-11-02
OSVSUSE-SU-2022:2308-1 No score

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
  • CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
  • CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).
Record
SUSE-SU-2022:2308-1
Updated
2026-11-02
OSVSUSE-SU-2022:2321-1 No score

Security update for openssl-1_0_0

This update for openssl-1_0_0 fixes the following issues:

  • CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
  • CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
Record
SUSE-SU-2022:2321-1
Updated
2026-11-02
OSVUSN-5402-1 No score

openssl, openssl1.0 vulnerabilities

Elison Niven discovered that OpenSSL incorrectly handled the c_rehash script. A local attacker could possibly use this issue to execute arbitrary commands when c_rehash is run. (CVE-2022-1292)

Raul Metsma discovered that OpenSSL incorrectly verified certain response signing certificates. A remote attacker could possibly use this issue to spoof certain response signing certificates. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1343)

Tom Colley discovered that OpenSSL used the incorrect MAC key in the RC4-MD5 ciphersuite. In non-default configurations were RC4-MD5 is enabled, a remote attacker could possibly use this issue to modify encrypted communications. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1434)

Aliaksei Levin discovered that OpenSSL incorrectly handled resources when decoding certificates and keys. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1473)

Record
USN-5402-1
Updated
2026-11-02
OSVUSN-5402-2 No score

openssl vulnerabilities

USN-5402-1 fixed several vulnerabilities in OpenSSL. This update provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

Elison Niven discovered that OpenSSL incorrectly handled the c_rehash script. A local attacker could possibly use this issue to execute arbitrary commands when c_rehash is run. (CVE-2022-1292)

Aliaksei Levin discovered that OpenSSL incorrectly handled resources when decoding certificates and keys. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1473)

Record
USN-5402-2
Updated
2026-11-02

Affected products

Show 28 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
openssl
AlmaLinux:8
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-devel
AlmaLinux:8
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-libs
AlmaLinux:8
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-perl
AlmaLinux:8
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl
AlmaLinux:9
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-devel
AlmaLinux:9
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-libs
AlmaLinux:9
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-perl
AlmaLinux:9
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
hvloader
Azure Linux:3
 before 1.0.1-2
1.0.1-2
openssl
Azure Linux:2
 before 1.1.1k-15
1.1.1k-15
Show 290 moreShow less
Affected packages
PackageAffectedFixed
libssl-dev
TuxCare:Ubuntu:16.04
 before 1.0.2g-1ubuntu4.21+tuxcare.els3
1.0.2g-1ubuntu4.21+tuxcare.els3
libssl-doc
TuxCare:Ubuntu:16.04
 before 1.0.2g-1ubuntu4.21+tuxcare.els3
1.0.2g-1ubuntu4.21+tuxcare.els3
libssl1.0.0
TuxCare:Ubuntu:16.04
 before 1.0.2g-1ubuntu4.21+tuxcare.els3
1.0.2g-1ubuntu4.21+tuxcare.els3
openssl
TuxCare:Ubuntu:16.04
 before 1.0.2g-1ubuntu4.21+tuxcare.els3
1.0.2g-1ubuntu4.21+tuxcare.els3
libssl-dev
TuxCare:Ubuntu:16.04
 before 1.0.2g-1ubuntu4.21+tuxcare.els4
1.0.2g-1ubuntu4.21+tuxcare.els4
libssl-doc
TuxCare:Ubuntu:16.04
 before 1.0.2g-1ubuntu4.21+tuxcare.els4
1.0.2g-1ubuntu4.21+tuxcare.els4
libssl1.0.0
TuxCare:Ubuntu:16.04
 before 1.0.2g-1ubuntu4.21+tuxcare.els4
1.0.2g-1ubuntu4.21+tuxcare.els4
openssl
TuxCare:Ubuntu:16.04
 before 1.0.2g-1ubuntu4.21+tuxcare.els4
1.0.2g-1ubuntu4.21+tuxcare.els4
openssl
TuxCare:OracleLinux:6
 before 1.0.1e-63.el6.tuxcare.els7
1.0.1e-63.el6.tuxcare.els7
openssl-devel
TuxCare:OracleLinux:6
 before 1.0.1e-63.el6.tuxcare.els7
1.0.1e-63.el6.tuxcare.els7
openssl-perl
TuxCare:OracleLinux:6
 before 1.0.1e-63.el6.tuxcare.els7
1.0.1e-63.el6.tuxcare.els7
openssl-static
TuxCare:OracleLinux:6
 before 1.0.1e-63.el6.tuxcare.els7
1.0.1e-63.el6.tuxcare.els7
openssl
TuxCare:CentOS:8.4
 before 1:1.1.1g-15.el8.4.tuxcare.els3
1:1.1.1g-15.el8.4.tuxcare.els3
openssl-devel
TuxCare:CentOS:8.4
 before 1:1.1.1g-15.el8.4.tuxcare.els3
1:1.1.1g-15.el8.4.tuxcare.els3
openssl-libs
TuxCare:CentOS:8.4
 before 1:1.1.1g-15.el8.4.tuxcare.els3
1:1.1.1g-15.el8.4.tuxcare.els3
openssl-perl
TuxCare:CentOS:8.4
 before 1:1.1.1g-15.el8.4.tuxcare.els3
1:1.1.1g-15.el8.4.tuxcare.els3
openssl-static
TuxCare:CentOS:8.4
 before 1:1.1.1g-15.el8.4.tuxcare.els3
1:1.1.1g-15.el8.4.tuxcare.els3
openssl
TuxCare:CentOS:6
 before 1.0.1e-63.el6.tuxcare.els7
1.0.1e-63.el6.tuxcare.els7
openssl-devel
TuxCare:CentOS:6
 before 1.0.1e-63.el6.tuxcare.els7
1.0.1e-63.el6.tuxcare.els7
openssl-perl
TuxCare:CentOS:6
 before 1.0.1e-63.el6.tuxcare.els7
1.0.1e-63.el6.tuxcare.els7
openssl-static
TuxCare:CentOS:6
 before 1.0.1e-63.el6.tuxcare.els7
1.0.1e-63.el6.tuxcare.els7
openssl
TuxCare:CentOS:8.5
 before 1:1.1.1k-5.el8.5.tuxcare.els2
1:1.1.1k-5.el8.5.tuxcare.els2
openssl-devel
TuxCare:CentOS:8.5
 before 1:1.1.1k-5.el8.5.tuxcare.els2
1:1.1.1k-5.el8.5.tuxcare.els2
openssl-libs
TuxCare:CentOS:8.5
 before 1:1.1.1k-5.el8.5.tuxcare.els2
1:1.1.1k-5.el8.5.tuxcare.els2
openssl-perl
TuxCare:CentOS:8.5
 before 1:1.1.1k-5.el8.5.tuxcare.els2
1:1.1.1k-5.el8.5.tuxcare.els2
openssl-static
TuxCare:CentOS:8.5
 before 1:1.1.1k-5.el8.5.tuxcare.els2
1:1.1.1k-5.el8.5.tuxcare.els2
openssl
TuxCare:CentOS:7
 before 1:1.0.2k-26.el7_9.tuxcare.els1
1:1.0.2k-26.el7_9.tuxcare.els1
openssl-devel
TuxCare:CentOS:7
 before 1:1.0.2k-26.el7_9.tuxcare.els1
1:1.0.2k-26.el7_9.tuxcare.els1
openssl-libs
TuxCare:CentOS:7
 before 1:1.0.2k-26.el7_9.tuxcare.els1
1:1.0.2k-26.el7_9.tuxcare.els1
openssl-perl
TuxCare:CentOS:7
 before 1:1.0.2k-26.el7_9.tuxcare.els1
1:1.0.2k-26.el7_9.tuxcare.els1
openssl-static
TuxCare:CentOS:7
 before 1:1.0.2k-26.el7_9.tuxcare.els1
1:1.0.2k-26.el7_9.tuxcare.els1
openssl
Debian:12
 before 1.1.1o-1
1.1.1o-1
openssl
Debian:13
 before 1.1.1o-1
1.1.1o-1
openssl
Debian:14
 before 1.1.1o-1
1.1.1o-1
openssl
Debian:9
 before 1.1.0l-1~deb9u6, plus listed versions
1.1.0f-31.1.0f-3+deb9u11.1.0f-3+deb9u21.1.0f-41.1.0f-5
Show 14 moreShow less
1.1.0g-11.1.0g-21.1.0g-2+riscv641.1.0h-11.1.0h-21.1.0h-31.1.0h-41.1.0j-1~deb9u11.1.0k-1~deb9u11.1.0l-1~deb9u11.1.0l-1~deb9u21.1.0l-1~deb9u31.1.0l-1~deb9u41.1.0l-1~deb9u5
1.1.0l-1~deb9u6
openssl
Debian:10
 before 1.1.1n-0+deb10u2, plus listed versions
1.1.1c-11.1.1d-0+deb10u11.1.1d-0+deb10u21.1.1d-0+deb10u31.1.1d-0+deb10u4
Show 18 moreShow less
1.1.1d-0+deb10u51.1.1d-0+deb10u61.1.1d-0+deb10u71.1.1d-0+deb10u81.1.1d-11.1.1d-21.1.1e-11.1.1f-11.1.1g-11.1.1h-11.1.1i-11.1.1i-21.1.1i-31.1.1j-11.1.1k-11.1.1l-11.1.1m-11.1.1n-0+deb10u1
1.1.1n-0+deb10u2
openssl
Debian:11
 before 1.1.1n-0+deb11u2, plus listed versions
1.1.1k-11.1.1k-1+deb11u11.1.1k-1+deb11u21.1.1l-11.1.1m-0+deb11u11.1.1m-11.1.1n-0+deb11u1
1.1.1n-0+deb11u2
OpenSSL_jll
Julia
 before 1.1.16+0
1.1.16+0
Openresty_jll
Julia
 before 1.21.4+0
1.21.4+0
openssl
Mageia:8
 before 1.1.1o-1.mga8
1.1.1o-1.mga8
openssl
openEuler:20.03-LTS-SP1
 before 1.1.1f-16.oe1
1.1.1f-16.oe1
openssl
openEuler:20.03-LTS-SP3
 before 1.1.1f-16.oe1
1.1.1f-16.oe1
openssl
openEuler:22.03-LTS
 before 1.1.1m-5.oe2203
1.1.1m-5.oe2203
intel-sgx-ssl
openEuler:20.03-LTS-SP1
 before 2.10-4.oe1
2.10-4.oe1
intel-sgx-ssl
openEuler:20.03-LTS-SP3
 before 2.10-4.oe1
2.10-4.oe1
intel-sgx-ssl
openEuler:22.03-LTS
 before 2.15.1-2.oe2203
2.15.1-2.oe2203
linux-sgx
openEuler:20.03-LTS-SP1
 before 2.11.100-12.oe1
2.11.100-12.oe1
linux-sgx
openEuler:20.03-LTS-SP3
 before 2.11.100-11.oe1
2.11.100-11.oe1
linux-sgx
openEuler:22.03-LTS
 before 2.15.1-6.oe2203
2.15.1-6.oe2203
openssl
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-debugsource
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-devel
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-libs
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-perl
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-debugsource
Red Hat:enterprise_linux:9::appstream
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-devel
Red Hat:enterprise_linux:9::appstream
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-perl
Red Hat:enterprise_linux:9::appstream
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl
Red Hat:enterprise_linux:9::baseos
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-debugsource
Red Hat:enterprise_linux:9::baseos
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-libs
Red Hat:enterprise_linux:9::baseos
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
openssl-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 1:3.0.1-41.el9_0
1:3.0.1-41.el9_0
jbcs-httpd24-openssl
Red Hat:jboss_core_services:1::el7
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-debuginfo
Red Hat:jboss_core_services:1::el7
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-devel
Red Hat:jboss_core_services:1::el7
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-libs
Red Hat:jboss_core_services:1::el7
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-perl
Red Hat:jboss_core_services:1::el7
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-static
Red Hat:jboss_core_services:1::el7
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl
Red Hat:jboss_core_services:1::el8
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-debuginfo
Red Hat:jboss_core_services:1::el8
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-devel
Red Hat:jboss_core_services:1::el8
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-libs
Red Hat:jboss_core_services:1::el8
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-libs-debuginfo
Red Hat:jboss_core_services:1::el8
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-perl
Red Hat:jboss_core_services:1::el8
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-static
Red Hat:jboss_core_services:1::el8
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el7
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el7
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el7
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el7
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el7
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el7
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el7
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el7
 before 1:2.4.51-37.el7jbcs
1:2.4.51-37.el7jbcs
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el7
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el7
 before 1:2.4.51-37.el7jbcs
1:2.4.51-37.el7jbcs
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-tools-debuginfo
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_ldap-debuginfo
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el8
 before 1:2.4.51-37.el8jbcs
1:2.4.51-37.el8jbcs
jbcs-httpd24-mod_proxy_html-debuginfo
Red Hat:jboss_core_services:1::el8
 before 1:2.4.51-37.el8jbcs
1:2.4.51-37.el8jbcs
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_session-debuginfo
Red Hat:jboss_core_services:1::el8
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el8
 before 1:2.4.51-37.el8jbcs
1:2.4.51-37.el8jbcs
jbcs-httpd24-mod_ssl-debuginfo
Red Hat:jboss_core_services:1::el8
 before 1:2.4.51-37.el8jbcs
1:2.4.51-37.el8jbcs
jbcs-httpd24-curl
Red Hat:jboss_core_services:1::el7
 before 0:7.86.0-2.el7jbcs
0:7.86.0-2.el7jbcs
jbcs-httpd24-curl-debuginfo
Red Hat:jboss_core_services:1::el7
 before 0:7.86.0-2.el7jbcs
0:7.86.0-2.el7jbcs
jbcs-httpd24-libcurl
Red Hat:jboss_core_services:1::el7
 before 0:7.86.0-2.el7jbcs
0:7.86.0-2.el7jbcs
jbcs-httpd24-libcurl-devel
Red Hat:jboss_core_services:1::el7
 before 0:7.86.0-2.el7jbcs
0:7.86.0-2.el7jbcs
jbcs-httpd24-curl
Red Hat:jboss_core_services:1::el8
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-curl-debuginfo
Red Hat:jboss_core_services:1::el8
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-libcurl
Red Hat:jboss_core_services:1::el8
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-libcurl-debuginfo
Red Hat:jboss_core_services:1::el8
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-libcurl-devel
Red Hat:jboss_core_services:1::el8
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-mod_http2
Red Hat:jboss_core_services:1::el7
 before 0:1.15.19-20.el7jbcs
0:1.15.19-20.el7jbcs
jbcs-httpd24-mod_http2-debuginfo
Red Hat:jboss_core_services:1::el7
 before 0:1.15.19-20.el7jbcs
0:1.15.19-20.el7jbcs
jbcs-httpd24-mod_http2
Red Hat:jboss_core_services:1::el8
 before 0:1.15.19-20.el8jbcs
0:1.15.19-20.el8jbcs
jbcs-httpd24-mod_http2-debuginfo
Red Hat:jboss_core_services:1::el8
 before 0:1.15.19-20.el8jbcs
0:1.15.19-20.el8jbcs
jws5-tomcat-native
Red Hat:jboss_enterprise_web_server:5.7::el7
 before 0:1.2.31-11.redhat_11.el7jws
0:1.2.31-11.redhat_11.el7jws
jws5-tomcat-native-debuginfo
Red Hat:jboss_enterprise_web_server:5.7::el7
 before 0:1.2.31-11.redhat_11.el7jws
0:1.2.31-11.redhat_11.el7jws
jws5-tomcat-native
Red Hat:jboss_enterprise_web_server:5.7::el8
 before 0:1.2.31-11.redhat_11.el8jws
0:1.2.31-11.redhat_11.el8jws
jws5-tomcat-native-debuginfo
Red Hat:jboss_enterprise_web_server:5.7::el8
 before 0:1.2.31-11.redhat_11.el8jws
0:1.2.31-11.redhat_11.el8jws
jws5-tomcat-native
Red Hat:jboss_enterprise_web_server:5.7::el9
 before 0:1.2.31-11.redhat_11.el9jws
0:1.2.31-11.redhat_11.el9jws
jws5-tomcat-native-debuginfo
Red Hat:jboss_enterprise_web_server:5.7::el9
 before 0:1.2.31-11.redhat_11.el9jws
0:1.2.31-11.redhat_11.el9jws
puppet-agent
Red Hat:satellite_capsule:6.13::el8
 before 0:7.26.0-3.el8sat
0:7.26.0-3.el8sat
puppet-agent
Red Hat:satellite:6.13::el8
 before 0:7.26.0-3.el8sat
0:7.26.0-3.el8sat
foreman
Red Hat:satellite_capsule:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman
Red Hat:satellite_utils:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-cli
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-debug
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-ec2
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-journald
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-libvirt
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-openstack
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-ovirt
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-postgresql
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-service
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-telemetry
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
foreman-vmware
Red Hat:satellite:6.13::el8
 before 0:3.5.1.23-1.el8sat
0:3.5.1.23-1.el8sat
python-gitpython
Red Hat:satellite_capsule:6.13::el8
 before 0:3.1.32-1.el8pc
0:3.1.32-1.el8pc
python39-gitpython
Red Hat:satellite_capsule:6.13::el8
 before 0:3.1.32-1.el8pc
0:3.1.32-1.el8pc
python-gitpython
Red Hat:satellite:6.13::el8
 before 0:3.1.32-1.el8pc
0:3.1.32-1.el8pc
python39-gitpython
Red Hat:satellite:6.13::el8
 before 0:3.1.32-1.el8pc
0:3.1.32-1.el8pc
rubygem-git
Red Hat:satellite:6.13::el8
 before 0:1.18.0-1.el8sat
0:1.18.0-1.el8sat
python-django
Red Hat:satellite_capsule:6.13::el8
 before 0:3.2.21-1.el8pc
0:3.2.21-1.el8pc
python39-django
Red Hat:satellite_capsule:6.13::el8
 before 0:3.2.21-1.el8pc
0:3.2.21-1.el8pc
python-django
Red Hat:satellite:6.13::el8
 before 0:3.2.21-1.el8pc
0:3.2.21-1.el8pc
python39-django
Red Hat:satellite:6.13::el8
 before 0:3.2.21-1.el8pc
0:3.2.21-1.el8pc
yggdrasil-worker-forwarder
Red Hat:satellite:6.13::el8
 before 0:0.0.3-1.el8sat
0:0.0.3-1.el8sat
puppet-agent
Red Hat:satellite_capsule:6.12::el8
 before 0:7.26.0-3.el8sat
0:7.26.0-3.el8sat
puppet-agent
Red Hat:satellite:6.12::el8
 before 0:7.26.0-3.el8sat
0:7.26.0-3.el8sat
foreman
Red Hat:satellite_capsule:6.12::el8
 before 0:3.3.0.23-1.el8sat
0:3.3.0.23-1.el8sat
foreman
Red Hat:satellite_utils:6.12::el8
 before 0:3.3.0.23-1.el8sat
0:3.3.0.23-1.el8sat
foreman
Red Hat:satellite:6.12::el8
 before 0:3.3.0.23-1.el8sat
0:3.3.0.23-1.el8sat
rubygem-git
Red Hat:satellite:6.12::el8
 before 0:1.18.0-1.el8sat
0:1.18.0-1.el8sat
rubygem-safemode
Red Hat:satellite:6.12::el8
 before 0:1.3.8-1.el8sat
0:1.3.8-1.el8sat
yggdrasil-worker-forwarder
Red Hat:satellite:6.12::el8
 before 0:0.0.3-1.el8sat
0:0.0.3-1.el8sat
puppet-agent
Red Hat:satellite_capsule:6.11::el7
 before 0:7.26.0-3.el7sat
0:7.26.0-3.el7sat
puppet-agent
Red Hat:satellite:6.11::el7
 before 0:7.26.0-3.el7sat
0:7.26.0-3.el7sat
puppet-agent
Red Hat:satellite_capsule:6.11::el8
 before 0:7.26.0-3.el8sat
0:7.26.0-3.el8sat
puppet-agent
Red Hat:satellite:6.11::el8
 before 0:7.26.0-3.el8sat
0:7.26.0-3.el8sat
tfm-rubygem-git
Red Hat:satellite:6.11::el7
 before 0:1.18.0-0.1.el7sat
0:1.18.0-0.1.el7sat
rubygem-git
Red Hat:satellite:6.11::el8
 before 0:1.18.0-0.1.el8sat
0:1.18.0-0.1.el8sat
foreman
Red Hat:satellite_capsule:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-debug
Red Hat:satellite_capsule:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman
Red Hat:satellite_utils:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-cli
Red Hat:satellite_utils:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-cli
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-debug
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-ec2
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-gce
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-journald
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-libvirt
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-openstack
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-ovirt
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-postgresql
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-service
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-telemetry
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman-vmware
Red Hat:satellite:6.11::el7
 before 0:3.1.1.27-1.el7sat
0:3.1.1.27-1.el7sat
foreman
Red Hat:satellite_capsule:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman
Red Hat:satellite_utils:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-cli
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-debug
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-ec2
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-gce
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-journald
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-libvirt
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-openstack
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-ovirt
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-postgresql
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
foreman-service
Red Hat:satellite:6.11::el8
 before 0:3.1.1.27-1.el8sat
0:3.1.1.27-1.el8sat
openssl
Rocky Linux:8
 before 1:1.1.1k-7.el8_6
1:1.1.1k-7.el8_6
openssl-1_1
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 1.1.0i-150100.14.30.1
1.1.0i-150100.14.30.1
openssl-1_1
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.1.0i-150100.14.30.1
1.1.0i-150100.14.30.1
openssl-1_1
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 1.1.0i-150100.14.30.1
1.1.0i-150100.14.30.1
openssl-1_1
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.1.0i-150100.14.30.1
1.1.0i-150100.14.30.1
openssl-1_1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.1.0i-150100.14.30.1
1.1.0i-150100.14.30.1
openssl-1_1
SUSE:Enterprise Storage 6
 before 1.1.0i-150100.14.30.1
1.1.0i-150100.14.30.1
openssl-1_1
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 1.1.0i-150000.4.69.1
1.1.0i-150000.4.69.1
openssl-1_1
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 1.1.0i-150000.4.69.1
1.1.0i-150000.4.69.1
openssl-1_1
SUSE:Linux Enterprise Server 15-LTSS
 before 1.1.0i-150000.4.69.1
1.1.0i-150000.4.69.1
openssl-1_1
SUSE:Linux Enterprise Server for SAP Applications 15
 before 1.1.0i-150000.4.69.1
1.1.0i-150000.4.69.1
openssl
SUSE:HPE Helion OpenStack 8
 before 1.0.2j-60.80.1
1.0.2j-60.80.1
openssl
SUSE:OpenStack Cloud 8
 before 1.0.2j-60.80.1
1.0.2j-60.80.1
openssl
SUSE:OpenStack Cloud Crowbar 8
 before 1.0.2j-60.80.1
1.0.2j-60.80.1
openssl
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.0.2j-60.80.1
1.0.2j-60.80.1
openssl
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.0.2j-60.80.1
1.0.2j-60.80.1
openssl
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.0.2j-60.80.1
1.0.2j-60.80.1
openssl
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.0.2j-60.80.1
1.0.2j-60.80.1
openssl-1_0_0
SUSE:OpenStack Cloud 9
 before 1.0.2p-3.53.1
1.0.2p-3.53.1
openssl-1_0_0
SUSE:OpenStack Cloud Crowbar 9
 before 1.0.2p-3.53.1
1.0.2p-3.53.1
openssl-1_0_0
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.0.2p-3.53.1
1.0.2p-3.53.1
openssl-1_0_0
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.0.2p-3.53.1
1.0.2p-3.53.1
openssl-1_0_0
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.0.2p-3.53.1
1.0.2p-3.53.1
openssl-1_0_0
SUSE:Linux Enterprise Server 12 SP5
 before 1.0.2p-3.53.1
1.0.2p-3.53.1
openssl-1_0_0
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.0.2p-3.53.1
1.0.2p-3.53.1
openssl-1_1
SUSE:OpenStack Cloud 9
 before 1.1.1d-2.66.1
1.1.1d-2.66.1
openssl-1_1
SUSE:OpenStack Cloud Crowbar 9
 before 1.1.1d-2.66.1
1.1.1d-2.66.1
openssl-1_1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.1.1d-2.66.1
1.1.1d-2.66.1
openssl-1_1
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.1.1d-2.66.1
1.1.1d-2.66.1
openssl-1_1
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.1.1d-2.66.1
1.1.1d-2.66.1
openssl-1_1
SUSE:Linux Enterprise Server 12 SP5
 before 1.1.1d-2.66.1
1.1.1d-2.66.1
openssl-1_1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.1.1d-2.66.1
1.1.1d-2.66.1
compat-openssl098
SUSE:Linux Enterprise Module for Legacy 12
 before 0.9.8j-106.36.1
0.9.8j-106.36.1
compat-openssl098
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 0.9.8j-106.36.1
0.9.8j-106.36.1
compat-openssl098
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 0.9.8j-106.36.1
0.9.8j-106.36.1
compat-openssl098
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 0.9.8j-106.36.1
0.9.8j-106.36.1
openssl-1_1
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Manager Proxy 4.1
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Manager Retail Branch Server 4.1
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Manager Server 4.1
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Linux Enterprise Micro 5.1
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Linux Enterprise Micro 5.2
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
SUSE:Enterprise Storage 7
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
openSUSE:Leap 15.3
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-1_1
openSUSE:Leap Micro 5.2
 before 1.1.1d-150200.11.48.1
1.1.1d-150200.11.48.1
openssl-3
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 3.0.1-150400.4.7.1
3.0.1-150400.4.7.1
openssl-3
openSUSE:Leap 15.4
 before 3.0.1-150400.4.7.1
3.0.1-150400.4.7.1
openssl-1_1
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 1.1.1l-150400.7.7.1
1.1.1l-150400.7.7.1
openssl-1_1
openSUSE:Leap 15.4
 before 1.1.1l-150400.7.7.1
1.1.1l-150400.7.7.1
openssl-1_0_0
SUSE:Linux Enterprise Module for Legacy 15 SP3
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Linux Enterprise Module for Legacy 15 SP4
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Linux Enterprise Server 15-LTSS
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Linux Enterprise Server for SAP Applications 15
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Manager Proxy 4.1
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Manager Retail Branch Server 4.1
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Manager Server 4.1
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Enterprise Storage 6
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
SUSE:Enterprise Storage 7
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
openSUSE:Leap 15.3
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl-1_0_0
openSUSE:Leap 15.4
 before 1.0.2p-150000.3.56.1
1.0.2p-150000.3.56.1
openssl
Ubuntu:Pro:14.04:LTS
 before 1.0.1f-1ubuntu2.27+esm10, plus listed versions
1.0.1e-3ubuntu11.0.1e-4ubuntu11.0.1e-4ubuntu21.0.1e-4ubuntu31.0.1e-4ubuntu4
Show 32 moreShow less
1.0.1f-1ubuntu11.0.1f-1ubuntu21.0.1f-1ubuntu2.11.0.1f-1ubuntu2.21.0.1f-1ubuntu2.31.0.1f-1ubuntu2.41.0.1f-1ubuntu2.51.0.1f-1ubuntu2.71.0.1f-1ubuntu2.81.0.1f-1ubuntu2.111.0.1f-1ubuntu2.121.0.1f-1ubuntu2.151.0.1f-1ubuntu2.161.0.1f-1ubuntu2.171.0.1f-1ubuntu2.181.0.1f-1ubuntu2.191.0.1f-1ubuntu2.201.0.1f-1ubuntu2.211.0.1f-1ubuntu2.221.0.1f-1ubuntu2.231.0.1f-1ubuntu2.241.0.1f-1ubuntu2.251.0.1f-1ubuntu2.261.0.1f-1ubuntu2.271.0.1f-1ubuntu2.27+esm11.0.1f-1ubuntu2.27+esm21.0.1f-1ubuntu2.27+esm31.0.1f-1ubuntu2.27+esm41.0.1f-1ubuntu2.27+esm51.0.1f-1ubuntu2.27+esm61.0.1f-1ubuntu2.27+esm71.0.1f-1ubuntu2.27+esm9
1.0.1f-1ubuntu2.27+esm10
openssl
Ubuntu:Pro:16.04:LTS
 before 1.0.2g-1ubuntu4.20+esm3, plus listed versions
1.0.2d-0ubuntu11.0.2d-0ubuntu21.0.2e-1ubuntu11.0.2f-2ubuntu11.0.2g-1ubuntu2
Show 22 moreShow less
1.0.2g-1ubuntu31.0.2g-1ubuntu41.0.2g-1ubuntu4.11.0.2g-1ubuntu4.21.0.2g-1ubuntu4.41.0.2g-1ubuntu4.51.0.2g-1ubuntu4.61.0.2g-1ubuntu4.81.0.2g-1ubuntu4.91.0.2g-1ubuntu4.101.0.2g-1ubuntu4.111.0.2g-1ubuntu4.121.0.2g-1ubuntu4.131.0.2g-1ubuntu4.141.0.2g-1ubuntu4.151.0.2g-1ubuntu4.161.0.2g-1ubuntu4.171.0.2g-1ubuntu4.181.0.2g-1ubuntu4.191.0.2g-1ubuntu4.201.0.2g-1ubuntu4.20+esm11.0.2g-1ubuntu4.20+esm2
1.0.2g-1ubuntu4.20+esm3
edk2
Ubuntu:Pro:16.04:LTS
 before 0~20160408.ffea0a2c-2ubuntu0.2+esm3, plus listed versions
0~20150106.5c2d456b-20~20160104.c2a892d7-10~20160408.ffea0a2c-20~20160408.ffea0a2c-2ubuntu0.10~20160408.ffea0a2c-2ubuntu0.20~20160408.ffea0a2c-2ubuntu0.2+esm1
0~20160408.ffea0a2c-2ubuntu0.2+esm3
openssl
Ubuntu:Pro:FIPS-updates:16.04:LTS
 before 1.0.2g-1ubuntu4.fips.4.20.3, plus listed versions
1.0.2g-1ubuntu4.fips.4.9.11.0.2g-1ubuntu4.fips.4.13.11.0.2g-1ubuntu4.fips.4.15.11.0.2g-1ubuntu4.fips.4.16.11.0.2g-1ubuntu4.fips.4.17.1
Show 4 moreShow less
1.0.2g-1ubuntu4.fips.4.18.11.0.2g-1ubuntu4.fips.4.19.31.0.2g-1ubuntu4.fips.4.20.11.0.2g-1ubuntu4.fips.4.20.2
1.0.2g-1ubuntu4.fips.4.20.3
openssl
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
1.0.2g-1ubuntu4.fips.4.6~ppa11.0.2g-1ubuntu4.fips.4.6~ppa21.0.2g-1ubuntu4.fips.4.6~ppa31.0.2g-1ubuntu4.fips.4.61.0.2g-1ubuntu4.fips.4.6.11.0.2g-1ubuntu4.fips.4.6.21.0.2g-1ubuntu4.fips.4.6.3
 None known
openssl
Ubuntu:18.04:LTS
 before 1.1.1-1ubuntu2.1~18.04.17, plus listed versions
1.0.2g-1ubuntu131.0.2g-1ubuntu141.0.2n-1ubuntu11.1.0g-2ubuntu11.1.0g-2ubuntu2
Show 17 moreShow less
1.1.0g-2ubuntu31.1.0g-2ubuntu41.1.0g-2ubuntu4.11.1.0g-2ubuntu4.31.1.1-1ubuntu2.1~18.04.11.1.1-1ubuntu2.1~18.04.21.1.1-1ubuntu2.1~18.04.31.1.1-1ubuntu2.1~18.04.41.1.1-1ubuntu2.1~18.04.51.1.1-1ubuntu2.1~18.04.61.1.1-1ubuntu2.1~18.04.71.1.1-1ubuntu2.1~18.04.81.1.1-1ubuntu2.1~18.04.91.1.1-1ubuntu2.1~18.04.101.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.141.1.1-1ubuntu2.1~18.04.15
1.1.1-1ubuntu2.1~18.04.17
openssl1.0
Ubuntu:18.04:LTS
 before 1.0.2n-1ubuntu5.9, plus listed versions
1.0.2n-1ubuntu21.0.2n-1ubuntu31.0.2n-1ubuntu41.0.2n-1ubuntu51.0.2n-1ubuntu5.1
Show 7 moreShow less
1.0.2n-1ubuntu5.21.0.2n-1ubuntu5.31.0.2n-1ubuntu5.41.0.2n-1ubuntu5.51.0.2n-1ubuntu5.61.0.2n-1ubuntu5.71.0.2n-1ubuntu5.8
1.0.2n-1ubuntu5.9
openssl
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 1.1.1-1ubuntu2.fips.2.1~18.04.17, plus listed versions
1.1.1-1ubuntu2.fips.2.1~18.04.5.11.1.1-1ubuntu2.fips.2.1~18.04.6.11.1.1-1ubuntu2.fips.2.1~18.04.7.11.1.1-1ubuntu2.fips.2.1~18.04.9.11.1.1-1ubuntu2.fips.2.1~18.04.9.2
Show 5 moreShow less
1.1.1-1ubuntu2.fips.2.1~18.04.9.31.1.1-1ubuntu2.fips.2.1~18.04.13.21.1.1-1ubuntu2.fips.2.1~18.04.151.1.1-1ubuntu2.fips.2.1~18.04.15.11.1.1-1ubuntu2.fips.2.1~18.04.15.2
1.1.1-1ubuntu2.fips.2.1~18.04.17
openssl
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
1.1.1-1ubuntu2.fips.2.1~18.04.3.11.1.1-1ubuntu2.fips.2.1~18.04.15.2
 None known
openssl
Ubuntu:20.04:LTS
 before 1.1.1f-1ubuntu2.13, plus listed versions
1.1.1c-1ubuntu41.1.1d-2ubuntu31.1.1d-2ubuntu61.1.1f-1ubuntu11.1.1f-1ubuntu2
Show 10 moreShow less
1.1.1f-1ubuntu2.11.1.1f-1ubuntu2.21.1.1f-1ubuntu2.31.1.1f-1ubuntu2.41.1.1f-1ubuntu2.51.1.1f-1ubuntu2.81.1.1f-1ubuntu2.91.1.1f-1ubuntu2.101.1.1f-1ubuntu2.111.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.13
openssl
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 1.1.1f-1ubuntu2.fips.13.1, plus listed versions
1.1.1f-1ubuntu2.fips.71.1.1f-1ubuntu2.fips.7.21.1.1f-1ubuntu2.fips.121.1.1f-1ubuntu2.fips.13
1.1.1f-1ubuntu2.fips.13.1
openssl
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
1.1.1f-1ubuntu2.fips.2.81.1.1f-1ubuntu2.fips.7.1
 None known
nodejs
Ubuntu:22.04:LTS
 before 12.22.9~dfsg-1ubuntu3.1, plus listed versions
12.22.5~dfsg-5ubuntu112.22.7~dfsg-2ubuntu112.22.7~dfsg-2ubuntu312.22.9~dfsg-1ubuntu212.22.9~dfsg-1ubuntu3
12.22.9~dfsg-1ubuntu3.1
openssl
Ubuntu:22.04:LTS
 before 3.0.2-0ubuntu1.1, plus listed versions
1.1.1l-1ubuntu13.0.0-1ubuntu13.0.1-0ubuntu13.0.2-0ubuntu1
3.0.2-0ubuntu1.1
edk2
Ubuntu:Pro:18.04:LTS
 before 0~20180205.c0d9813c-2ubuntu0.3+esm2, plus listed versions
0~20170911.5dfba97c-10~20171010.234dbcef-10~20171027.76fd5a66-10~20171205.a9212288-10~20180105.0bc94c74-1
Show 6 moreShow less
0~20180205.c0d9813c-10~20180205.c0d9813c-20~20180205.c0d9813c-2ubuntu0.10~20180205.c0d9813c-2ubuntu0.20~20180205.c0d9813c-2ubuntu0.30~20180205.c0d9813c-2ubuntu0.3+esm1
0~20180205.c0d9813c-2ubuntu0.3+esm2
edk2
Ubuntu:20.04:LTS
 before 0~20191122.bd85bf54-2ubuntu3.6, plus listed versions
0~20190606.20d2e5a1-2ubuntu10~20190828.37eef910-30~20190828.37eef910-40~20191122.bd85bf54-10~20191122.bd85bf54-1ubuntu1
Show 9 moreShow less
0~20191122.bd85bf54-20~20191122.bd85bf54-2ubuntu10~20191122.bd85bf54-2ubuntu20~20191122.bd85bf54-2ubuntu30~20191122.bd85bf54-2ubuntu3.10~20191122.bd85bf54-2ubuntu3.20~20191122.bd85bf54-2ubuntu3.30~20191122.bd85bf54-2ubuntu3.40~20191122.bd85bf54-2ubuntu3.5
0~20191122.bd85bf54-2ubuntu3.6
edk2
Ubuntu:22.04:LTS
 before 2022.02-3ubuntu0.22.04.3, plus listed versions
2021.08~rc0-22021.08-32021.11~rc1-12021.11-12021.11-2
Show 7 moreShow less
2022.02~rc1-12022.02~rc1-1ubuntu12022.02-12022.02-22022.02-32022.02-3ubuntu0.22.04.12022.02-3ubuntu0.22.04.2
2022.02-3ubuntu0.22.04.3
openssl-1_1
openSUSE:Tumbleweed
 before 1.1.1o-1.1
1.1.1o-1.1
openssl-1_0_0
openSUSE:Tumbleweed
 before 1.0.2u-9.1
1.0.2u-9.1
openssl-3
openSUSE:Tumbleweed
 before 3.0.5-1.1
3.0.5-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubli8u99/CVE-2022-12922022-05-24
PoC in GitHubalcaparra/CVE-2022-12922022-05-30
PoC in GitHubrama291041610/CVE-2022-12922022-05-30
PoC in GitHubgreek0x0/CVE-2022-12922022-09-01
PoC in GitHubund3sc0n0c1d0/CVE-2022-12922022-09-13

History

History
RecordedChangedSources
factsCVE List, EUVD, OSV
exploitsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-1292 is a high vulnerability (CVSS 7.3) in Openssl, published May 3, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 82.6%, the 99th percentile. Fixed in openssl 1:1.1.1k-7.el8_6.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 69 package rows, 473 references and the rest of 1 source description. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 3 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open