Univention Bugzilla – Bug 54901
openssl: Multiple issues (5.0)
Last modified: 2022-06-27 18:55:01 CEST
New Debian openssl 1.1.1n-0+deb10u3 fixes: This update addresses the following issue: * the c_rehash script allows command injection (CVE-2022-2068)
--- mirror/ftp/pool/main/o/openssl/openssl_1.1.1n-0+deb10u2.dsc +++ apt/ucs_5.0-0-errata5.0-1/source/openssl_1.1.1n-0+deb10u3.dsc @@ -1,3 +1,8 @@ +1.1.1n-0+deb10u3 [Fri, 24 Jun 2022 22:07:00 +0200] Sebastian Andrzej Siewior <sebastian@breakpoint.cc>: + + * CVE-2022-2068 (The c_rehash script allows command injection). + * Update expired certs. + 1.1.1n-0+deb10u2 [Tue, 10 May 2022 20:40:51 +0200] Sebastian Andrzej Siewior <sebastian@breakpoint.cc>: * CVE-2022-1292 (The c_rehash script allows command injection). <http://piuparts.knut.univention.de/5.0-1/#8379414865730023105>
OK: yaml OK: announce_errata OK: patch OK: piuparts [5.0-1] a628bd690c Bug #54901: openssl 1.1.1n-0+deb10u3 doc/errata/staging/openssl.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) [5.0-1] aa4c2e1680 Bug #54901: openssl 1.1.1n-0+deb10u3 doc/errata/staging/openssl.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+)
<https://errata.software-univention.de/#/?erratum=5.0x340>