[tnozaki-openssl] CVE-2022-1292: The c_rehash script does not properly sanitise shell metacharacters to prevent command injection

[Takehiko NOZAKI]

https://www.openssl.org/news/vulnerabilities-1.0.2.html#CVE-2021-4160

[Takehiko NOZAKI]

BUGFIX: Issue #288 - CVE-2022-1292 The c_rehash script does not properly sanitise shell metacharacters to prevent command injection

patch obtained from: https://github.com/openssl/openssl/commit/e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23

original commit message:

c_rehash: Do not use shell to invoke openssl Except on VMS where it is safe.

This fixes CVE-2022-1292.

Reviewed-by: Matthias St. Pierre [e-mail] Reviewed-by: Matt Caswell [e-mail]

→ <<cset 3bd6b646ad7a>>