<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 08/04/2022 13:53, Akshar Kanak
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CALh=J_e_cpq7wA54g4s9o6zpWH4_HB0NEwQNM+mBODbV0Dza0Q@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Dear team
<div> in latest openssl openssl-1.0.2k-25.el7_9.x86_64 ,
looks like there is an issue with change logs .</div>
<div> rpm -qi --changelog openssl-1.0.2k-25.el7_9.x86_64
shows me </div>
<div> "</div>
<div> * Wed Mar 23 2022 Dmitry Belyavskiy <<a
href="mailto:dbelyavs@redhat.com" moz-do-not-send="true"
class="moz-txt-link-freetext">dbelyavs@redhat.com</a>> -
1:1.0.2k-25</div>
- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable
when parsing certificates<br>
- Related: rhbz#2067160
<div>"</div>
<div>The CVE number should be <span
style="color:rgb(0,0,0);font-family:"Open
Sans",Helvetica,sans-serif">CVE-2022-0778 . Right ?</span></div>
<div><span style="color:rgb(0,0,0);font-family:"Open
Sans",Helvetica,sans-serif">reference : </span><a
href="https://bugzilla.redhat.com/show_bug.cgi?id=2062202"
moz-do-not-send="true" class="moz-txt-link-freetext">https://bugzilla.redhat.com/show_bug.cgi?id=2062202</a><br>
</div>
</div>
</blockquote>
<br>
I checked the RHEL version and it has the same CVE number listed so
this is a RHEL bug not a CentOS one.<br>
<br>
Trevor<br>
</body>
</html>