Skip to content

Latest commit

 

History

History
45 lines (31 loc) · 2.01 KB

CVE-2022-2097.md

File metadata and controls

45 lines (31 loc) · 2.01 KB

9. CVE-2022-2097 - OpenSSL

Published: 07/05/2022

Recommendation:

EDK2 does not enable AES OCB mode or use the 32-bit AES-NI assembly optimizations.

Until further notice, the following versions of OpenSSL are appropriate to use within the EDK2 CryptoPkg:

  • OpenSSL 1.1.1j, updated in the edk2-stable202105 stable tag
  • OpenSSL 1.1.1n, updated in the edk2-stable202205 stable tag