OpenSSL: Multiple Vulnerabilities

OpenSSL: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenSSL, the worst of which could result in remote code execution. openssl 2022-11-01 2022-11-01 878269 remote 3.0.7 3.0.7

OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) as well as a general purpose cryptography library.

Multiple buffer overflows exist in OpenSSL's handling of TLS certificates for client authentication.

It is believed that, while unlikely, code execution is possible in certain system configurations.

Users operating TLS servers may consider disabling TLS client authentication, if it is being used, until fixes are applied.

All OpenSSL 3 users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-libs/openssl-3.0.7"

CVE-2022-3602 CVE-2022-3786 ajak ajak