abhishekmadhu
Nimbostratus
Jul 25, 2024Individual OpenSSL Upgrade
We have a F5 LTM Virtual module, we need to mitigate the "CVE-2022-1292" and we can see that they suggest us to upgrade the Open SSL Version, Can someone let me know is it possible to upgrade the only OpenSSL version without upgrading the TMOS.
==================================================================
Vulnerability Name:
OpenSSL 1.0.2 < 1.0.2ze Vulnerability
solution:
Upgrade to OpenSSL version 1.0.2ze or later.
additional information:
Path : /usr/bin/openssl
Reported version : 1.0.2za
Fixed version : 1.0.2ze
https://www.cve.org/CVERecord?id=CVE-2022-1292
http://www.nessus.org/u?f1567dce
https://www.openssl.org/news/secadv/20220503.txt