What is RHSA-2022:4899?

RHSA-2022:4899 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: compat-openssl11 security and bug fix update

Which CVE IDs does RHSA-2022:4899 cover?

RHSA-2022:4899 covers the following CVE IDs: CVE-2022-0778. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:4899?

RHSA-2022:4899 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2022:4899?

RHSA-2022:4899 affects 17 products, including: Red Hat Enterprise Linux AppStream (v. 9); compat-openssl11-1:1.1.1k-4.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); compat-openssl11-1:1.1.1k-4.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); compat-openssl11-1:1.1.1k-4.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); compat-openssl11-1:1.1.1k-4.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); and others — see the full list on the advisory page.

RHSA-2022:4899HighCVSS 7.5

Red Hat Security Advisory: compat-openssl11 security and bug fix update

Vendor

Red Hat Product Security

Published

June 3, 2022

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-0778 →

📋 Description

CVE-2022-0778 — openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

🎯 Affected products17

Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-1:1.1.1k-4.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-1:1.1.1k-4.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-1:1.1.1k-4.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-1:1.1.1k-4.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-1:1.1.1k-4.el9_0.src as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-1:1.1.1k-4.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debuginfo-1:1.1.1k-4.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debuginfo-1:1.1.1k-4.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debuginfo-1:1.1.1k-4.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debuginfo-1:1.1.1k-4.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debuginfo-1:1.1.1k-4.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debugsource-1:1.1.1k-4.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debugsource-1:1.1.1k-4.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debugsource-1:1.1.1k-4.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debugsource-1:1.1.1k-4.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
compat-openssl11-debugsource-1:1.1.1k-4.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products17

✅ Remediation

🔗 References (4)