UBUNTU-CVE-2026-45446

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-45446
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-45446
Upstream
  • CVE-2026-45446
Downstream
Related
Published
2026-06-09T00:00:00Z
Modified
2026-06-10T01:15:07.460367362Z
Severity
  • Ubuntu - low
Summary
[none]
Details

Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

References

Affected packages

Ubuntu:22.04:LTS
openssl

Package

Name
openssl
Purl
pkg:deb/ubuntu/openssl?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.2-0ubuntu1.25

Affected versions

1.*
1.1.1l-1ubuntu1
3.*
3.0.0-1ubuntu1
3.0.1-0ubuntu1
3.0.2-0ubuntu1
3.0.2-0ubuntu1.1
3.0.2-0ubuntu1.2
3.0.2-0ubuntu1.4
3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.9
3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.17
3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.23

Ecosystem specific 

{
    "availability": "No subscription required",
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "libssl3",
            "binary_version": "3.0.2-0ubuntu1.25"
        },
        {
            "binary_name": "openssl",
            "binary_version": "3.0.2-0ubuntu1.25"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
Ubuntu:24.04:LTS
edk2

Package

Name
edk2
Purl
pkg:deb/ubuntu/edk2?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2023.*
2023.05-2
2023.11-2
2023.11-3
2023.11-4
2023.11-5
2023.11-6
2023.11-8
2024.*
2024.02-1
2024.02-2
2024.02-2ubuntu0.1
2024.02-2ubuntu0.3
2024.02-2ubuntu0.4
2024.02-2ubuntu0.5
2024.02-2ubuntu0.6
2024.02-2ubuntu0.7
2024.02-2ubuntu0.8

Ecosystem specific 

{
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "efi-shell-aa64",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "efi-shell-arm",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "efi-shell-ia32",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "efi-shell-riscv64",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "efi-shell-x64",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "ovmf",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "ovmf-ia32",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "ovmf-legacy",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "qemu-efi-aarch64",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "qemu-efi-arm",
            "binary_version": "2024.02-2ubuntu0.8"
        },
        {
            "binary_name": "qemu-efi-riscv64",
            "binary_version": "2024.02-2ubuntu0.8"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
openssl

Package

Name
openssl
Purl
pkg:deb/ubuntu/openssl?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.13-0ubuntu3.11

Affected versions

3.*
3.0.10-1ubuntu2
3.0.10-1ubuntu2.1
3.0.10-1ubuntu3
3.0.10-1ubuntu4
3.0.13-0ubuntu2
3.0.13-0ubuntu3
3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.3
3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9

Ecosystem specific 

{
    "availability": "No subscription required",
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "libssl3t64",
            "binary_version": "3.0.13-0ubuntu3.11"
        },
        {
            "binary_name": "openssl",
            "binary_version": "3.0.13-0ubuntu3.11"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
Ubuntu:25.10
edk2

Package

Name
edk2
Purl
pkg:deb/ubuntu/edk2?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2025.*
2025.02-3ubuntu2
2025.02-8
2025.02-8ubuntu1
2025.02-8ubuntu2
2025.02-8ubuntu3
2025.02-8ubuntu3.1

Ecosystem specific 

{
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "efi-shell-aa64",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "efi-shell-arm",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "efi-shell-ia32",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "efi-shell-loongarch64",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "efi-shell-riscv64",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "efi-shell-x64",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "ovmf",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "ovmf-ia32",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "ovmf-inteltdx",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "ovmf-legacy",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "qemu-efi-aarch64",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "qemu-efi-arm",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "qemu-efi-loongarch64",
            "binary_version": "2025.02-8ubuntu3.1"
        },
        {
            "binary_name": "qemu-efi-riscv64",
            "binary_version": "2025.02-8ubuntu3.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
openssl

Package

Name
openssl
Purl
pkg:deb/ubuntu/openssl?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.5.3-1ubuntu3.4

Affected versions

3.*
3.4.1-1ubuntu3
3.5.0-2ubuntu1
3.5.2-1ubuntu1
3.5.3-1ubuntu2
3.5.3-1ubuntu3
3.5.3-1ubuntu3.3

Ecosystem specific 

{
    "availability": "No subscription required",
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "libssl3t64",
            "binary_version": "3.5.3-1ubuntu3.4"
        },
        {
            "binary_name": "openssl",
            "binary_version": "3.5.3-1ubuntu3.4"
        },
        {
            "binary_name": "openssl-provider-legacy",
            "binary_version": "3.5.3-1ubuntu3.4"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
Ubuntu:26.04:LTS
edk2

Package

Name
edk2
Purl
pkg:deb/ubuntu/edk2?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2025.*
2025.02-8ubuntu3
2025.11-3ubuntu6
2025.11-3ubuntu7

Ecosystem specific 

{
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "efi-shell-aa64",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "efi-shell-loongarch64",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "efi-shell-riscv64",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "efi-shell-x64",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "ovmf",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "ovmf-amdsev",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "ovmf-generic",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "ovmf-inteltdx",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "ovmf-legacy",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "qemu-efi-aarch64",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "qemu-efi-loongarch64",
            "binary_version": "2025.11-3ubuntu7"
        },
        {
            "binary_name": "qemu-efi-riscv64",
            "binary_version": "2025.11-3ubuntu7"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
openssl

Package

Name
openssl
Purl
pkg:deb/ubuntu/openssl?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.5.5-1ubuntu3.2

Affected versions

3.*
3.5.3-1ubuntu2
3.5.5-1ubuntu1
3.5.5-1ubuntu3

Ecosystem specific 

{
    "availability": "No subscription required",
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "libssl3t64",
            "binary_version": "3.5.5-1ubuntu3.2"
        },
        {
            "binary_name": "openssl",
            "binary_version": "3.5.5-1ubuntu3.2"
        },
        {
            "binary_name": "openssl-provider-legacy",
            "binary_version": "3.5.5-1ubuntu3.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
Ubuntu:Pro:22.04:LTS
nodejs

Package

Name
nodejs
Purl
pkg:deb/ubuntu/nodejs?arch=source&distro=esm-apps%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

12.*
12.22.5~dfsg-5ubuntu1
12.22.7~dfsg-2ubuntu1
12.22.7~dfsg-2ubuntu3
12.22.9~dfsg-1ubuntu2
12.22.9~dfsg-1ubuntu3
12.22.9~dfsg-1ubuntu3.1
12.22.9~dfsg-1ubuntu3.2
12.22.9~dfsg-1ubuntu3.3
12.22.9~dfsg-1ubuntu3.4
12.22.9~dfsg-1ubuntu3.5
12.22.9~dfsg-1ubuntu3.6
12.22.9~dfsg-1ubuntu3.6+esm2

Ecosystem specific 

{
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "libnode72",
            "binary_version": "12.22.9~dfsg-1ubuntu3.6+esm2"
        },
        {
            "binary_name": "nodejs",
            "binary_version": "12.22.9~dfsg-1ubuntu3.6+esm2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
Ubuntu:Pro:FIPS-preview:22.04:LTS
openssl

Package

Name
openssl
Purl
pkg:deb/ubuntu/openssl?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*
3.0.2-0ubuntu1.10+Fips1
3.0.2-0ubuntu1.12+Fips1

Ecosystem specific 

{
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "libssl3",
            "binary_version": "3.0.2-0ubuntu1.12+Fips1"
        },
        {
            "binary_name": "openssl",
            "binary_version": "3.0.2-0ubuntu1.12+Fips1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
openssl-fips

Package

Name
openssl-fips
Purl
pkg:deb/ubuntu/openssl-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*
3.0.5-0ubuntu0.1+Fips2.1

Ecosystem specific 

{
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "openssl-fips-module-3",
            "binary_version": "3.0.5-0ubuntu0.1+Fips2.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
Ubuntu:Pro:FIPS-updates:22.04:LTS
openssl

Package

Name
openssl
Purl
pkg:deb/ubuntu/openssl?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*
3.0.2-0ubuntu1.10+Fips1
3.0.2-0ubuntu1.12+Fips1
3.0.2-0ubuntu1.14+Fips1
3.0.2-0ubuntu1.15+Fips1
3.0.2-0ubuntu1.16+Fips1
3.0.2-0ubuntu1.17+Fips1
3.0.2-0ubuntu1.18+Fips1
3.0.2-0ubuntu1.19+Fips1
3.0.2-0ubuntu1.20+Fips1
3.0.2-0ubuntu1.21+Fips1
3.0.2-0ubuntu1.23+Fips1

Ecosystem specific 

{
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "libssl3",
            "binary_version": "3.0.2-0ubuntu1.23+Fips1"
        },
        {
            "binary_name": "openssl",
            "binary_version": "3.0.2-0ubuntu1.23+Fips1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
openssl-fips

Package

Name
openssl-fips
Purl
pkg:deb/ubuntu/openssl-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*
3.0.5-0ubuntu0.1+Fips2.1
3.0.5-0ubuntu0.2+Fips1

Ecosystem specific 

{
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "openssl-fips-module-3",
            "binary_version": "3.0.5-0ubuntu0.2+Fips1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"
Ubuntu:Pro:FIPS-updates:24.04:LTS
openssl-fips

Package

Name
openssl-fips
Purl
pkg:deb/ubuntu/openssl-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*
3.0.13-0ubuntu3+Fips1
3.0.13-0ubuntu3.6+Fips1

Ecosystem specific 

{
    "priority_reason": "OpenSSL developers have rated this as being low severity",
    "binaries": [
        {
            "binary_name": "openssl-fips-module-3",
            "binary_version": "3.0.13-0ubuntu3.6+Fips1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-45446.json"