Bug 855488 (CVE-2022-2274)

Summary:	=dev-libs/openssl-3.0.4: AVX512 buffer overflow
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial	CC:	base-system
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://github.com/openssl/openssl/issues/18625
Whiteboard:	~3 [noglsa]
Package list:		Runtime testing required:	---

Description Sam James archtester

2022-07-01 07:52:01 UTC

This only affected *exactly* =dev-libs/openssl-3.0.4 (and OpenSSL 3 is still masked) and is fixed in -r1. The bad version was only in the tree for a few hours.

Filing for posterity but no action required from us.