OpenSSL CVE-2022-0778

[Hes]

March 15th a new DoS vulnerability in OpenSSL was published.

Is there any documentation available on how quick Cisco tries to respond to these matters?

OpenSSL is used in quite a lot of Cisco products, one would assume they would be first in line to monitoring this software library but so far no news yet.
https://www.openssl.org/news/vulnerabilities.html

[b.winter]

Please keep checking the security advisories page for updates on possible affected products and fixes:

https://tools.cisco.com/security/center/publicationListing.x

[jeronimo]

interestingly, entering CVE-2022-0778 into the CVE column on that page yields no result, whereas we know that at least one product is affected?

[b.winter]

As an update to this post:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb27855