[Epel-packagers-sig] [Bug 2081494] CVE-2022-1292 openssl: c_rehash script allows command injection

https://bugzilla.redhat.com/show_bug.cgi?id=2081494

--- Doc Text *updated* by Mauro Matteo Cascella mcascell@redhat.com --- A flaw was found in OpenSSL. The `c_rehash` script does not properly sanitize shell meta-characters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script.