Update OpenSSL to address CVE-2022-1292 and CVE-2022-2068

[chris-lsn]

Version: 24.6.2

Description:

We need to update our OpenSSL version to address two critical vulnerabilities:

CVE-2022-1292
Affects OpenSSL versions prior to 1.1.1o
The c_rehash script is vulnerable to command injection due to improper sanitization of shell metacharacters
An attacker could potentially execute arbitrary commands with the privileges of the script on systems where it's automatically executed

CVE-2022-2068
Affects OpenSSL versions prior to 1.1.1p
Additional command injection vulnerabilities in the c_rehash script, beyond those fixed for CVE-2022-1292
Similar risks of arbitrary command execution on affected systems
Action items:

Path : /run/nvidia/driver/usr/lib64/libcrypto.so.1.1.1k Reported version : 1.1.1k Fixed version : 1.1.1p
Path : /run/nvidia/driver/usr/lib64/libssl.so.1.1.1k Reported version : 1.1.1k Fixed version : 1.1.1p

Solution: Update OpenSSL to version 1.1.1p or later