USN-6039-1: OpenSSL vulnerabilities

It was discovered that OpenSSL was not properly managing file locks when
processing policy constraints. If a user or automated system were tricked
into processing a certificate chain with specially crafted policy
constraints, a remote attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu
22.10. (CVE-2022-3996)

David Benjamin discovered that OpenSSL was not properly performing the
verification of X.509 certificate chains that include policy constraints,
which could lead …

automated certificate constraints cve denial of service file issue locks lts openssl openssl vulnerabilities performing policy service system ubuntu usn verification vulnerabilities