6. CVE-2022-0778 - OpenSSL

Published: 03/15/2022

Recommendation:

EDK2 does not use the BN_mod_sqrt() function.

Until further notice, the following versions of OpenSSL are appropriate to use within the EDK2 CryptoPkg:

  • OpenSSL 1.1.1j, updated in the edk2-stable202105 stable tag
  • OpenSSL 1.1.1n, updated in the edk2-stable202205 stable tag