エラータID: AXSA:2022-4010:01

Release date: 
Monday, November 7, 2022 - 11:50
Affected Channels: 
MIRACLE LINUX 9 for x86_64

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. compat-openssl11 provides the legacy 1.1 version of OpenSSL for use with older binaries.

Security Fix(es):

* openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* compat-openssl11 breaks in FIPS (BZ#2091968)

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).


Update packages.

Additional Info: 



  1. compat-openssl11-1.1.1k-4.el9.ML.1.src.rpm
    MD5: e7f93ced100598d830144c4e71245b87
    SHA-256: 6d367ce7516119b2aaacaf94c83ad317faffe777130de38a6692f8d610c999c5
    Size: 7.23 MB

Asianux Server 9 for x86_64
  1. compat-openssl11-1.1.1k-4.el9.ML.1.x86_64.rpm
    MD5: f0c5ed4a9c8f09f5c60e28f0dbb9eec3
    SHA-256: 5aa59eb113657bc10603bf7cc3dc5f8e909c3b673b00a1b42f011452f38eeb96
    Size: 1.45 MB
  2. compat-openssl11-1.1.1k-4.el9.ML.1.i686.rpm
    MD5: 8aa57e11ca17feb9f69bffb494c9705d
    SHA-256: 3b5b5f1e00da32b4c82bba2a3d888f48abc529107f8d3ffe4524aea1692c52c2
    Size: 1.44 MB