1 files changed, 23 insertions, 0 deletions
diff --git a/security/openssl-quictls/files/patch-CVE-2022-2068 b/security/openssl-quictls/files/patch-CVE-2022-2068
new file mode 100644
index 000000000000..367fd562181b
--- /dev/null
+++ b/security/openssl-quictls/files/patch-CVE-2022-2068
@@ -0,0 +1,23 @@
+From 8a3579a7b7067a983e69a4eda839ac408c120739 Mon Sep 17 00:00:00 2001
+From: Tomas Mraz <tomas@openssl.org>
+Date: Mon, 13 Jun 2022 17:10:15 +0200
+Subject: [PATCH] c_rehash: Drop the issuer_name_hash= prefix from the CRL hash
+
+Reviewed-by: Richard Levitte <levitte@openssl.org>
+Reviewed-by: Matt Caswell <matt@openssl.org>
+---
+ tools/c_rehash.in | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/tools/c_rehash.in b/tools/c_rehash.in
+index 2f735d68c9c8..343cdc1e7575 100644
+--- tools/c_rehash.in.orig
++++ tools/c_rehash.in
+@@ -222,6 +222,7 @@ sub link_hash {
+                                        "-fingerprint", "-noout",
+                                        "-in", $fname);
+     chomp $hash;
++    $hash =~ s/^.*=// if !$is_cert;
+     chomp $fprint;
+     return if !$hash;
+     $fprint =~ s/^.*=//;