| # OpenSSL Advisory: May 3rd, 2022 (BoringSSL Not Affected) |
| |
| OpenSSL have published a [security advisory](https://mta.openssl.org/pipermail/openssl-announce/2022-May/000224.html). Here's how it affects BoringSSL: |
| |
| CVE | Summary | [Severity] in OpenSSL | Impact to BoringSSL |
| ----|---------|-----------------------|--------------------- |
| CVE-2022-1292 | Failure to escape shell metacharacters. | Moderate | Not affected. BoringSSL does not contain this script. |
| CVE-2022-1343 | False-positive OCSP validation if OCSP_NOCHECKS set. | Moderate | Not affected. BoringSSL does not contain this code. |
| CVE-2022-1434 | RC4-MD5 ciphersuite used AAD as MAC key. | Low | Not affected. BoringSSL does not contain the affected code. |
| CVE-2022-1473 | Memory leak in OPENSSL_LH_flush | Low | Not affected. BoringSSL does not contain the affected code. |
| |
| [Severity]: https://openssl-library.org/policies/general/security-policy/index.html#issue-severity |
