Description
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty
ciphertext can report success without verifying the supplied authentication
tag when the operation is finalized by calling the EVP_Cipher() function.
Impact summary: Applications calling EVP_Cipher() on an empty ciphertext and
expecting the call to check the AEAD tag may accept forged messages.
CWE: CWE-354 (Improper Validation of Integrity Check Value)
Description: The EVP_Cipher() API call for AEAD ciphers behaves like a one
shot encryption and decryption call. It also verifies the AEAD tag after the
decryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers
it skipped the AEAD tag verification when an empty ciphertext was passed to
the function. The callers of this function might believe that a successful
return indicates a valid AEAD tag for these ciphers, even when that has not
truly been validated in this case.
FIPS impact: no
The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE
as the affected algorithms are not FIPS approved and thus not implemented
in the FIPS module.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 4.0.0 – < 4.0.2, 3.6.0 – < 3.6.4, 3.5.0 – < 3.5.8, 3.4.0 – < 3.4.7, 3.0.0 – < 3.0.22 | 4.0.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.6.4-1 | — |
| Debian 13 | openssl | 3.5.7-1~deb13u2 | — |
| Debian 12 | openssl | 3.0.22-1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | edk2 +1 | No fix yet | — |
| Ubuntu 26.04 LTS | edk2 | 2025.11-3ubuntu7.3 | USN-8865-1 |
| Ubuntu 26.04 LTS | edk2-hwe | No fix yet | — |
| Ubuntu 26.04 LTS | openssl | 3.5.5-1ubuntu3.5 | USN-8678-3, USN-8678-1 |
| Ubuntu 24.04 LTS | edk2 | 2024.02-2ubuntu0.10 | USN-8865-1 |
| Ubuntu 24.04 LTS | openssl | 3.0.13-0ubuntu3.15 | USN-8678-1 |
| Ubuntu 22.04 LTS | edk2 | 2022.02-3ubuntu0.22.04.7 | USN-8865-1 |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.29 | USN-8678-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS-updates 24.04 LTS | openssl-fips | 3.0.13-0ubuntu3.15+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl | 3.0.2-0ubuntu1.29+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | edk2 | 0~20191122.bd85bf54-2ubuntu3.6+esm1 | USN-8865-1 |
| Ubuntu Pro 18.04 LTS | edk2 | 0~20180205.c0d9813c-2ubuntu0.3+esm3 | USN-8865-1 |
| Ubuntu Pro 18.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 16.04 LTS | edk2 | 0~20160408.ffea0a2c-2ubuntu0.2+esm4 | USN-8865-1 |
| Ubuntu Pro 16.04 LTS | nodejs | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | bootupd +1 | 0.2.36-3.hum1 | RHSA-2026:59260 |
| Red Hat Hardened Images 1 | chunkah | 0.6.0-3.hum1 | RHSA-2026:42825 |
| Red Hat Hardened Images 1 | openssl +10 | 3.5.8-0.1.hum1 | RHSA-2026:59641, RHSA-2026:59635 |
| Red Hat Hardened Images 1 | python-cryptography +1 | 50.0.0-1.hum1 | RHSA-2026:55543 |
| Red Hat Hardened Images 1 | ruby3.3 +5 | 3.3.10-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | ruby3.4 +5 | 3.4.10-31.7.hum1 | RHSA-2026:62786 |
| Red Hat Hardened Images 1 | ruby4.0 +5 | 4.0.6-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem3.3-bigdecimal | 3.1.5-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-bundler | 2.5.22-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-devel +1 | 3.5.22-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-io-console | 0.7.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-irb | 1.13.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-json | 2.7.2-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-minitest | 5.20.0-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-power_assert | 2.0.3-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-psych | 5.1.2-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-racc | 1.7.3-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rake | 13.1.0-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rbs | 3.4.0-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rdoc | 6.6.3.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rexml | 3.4.4-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rss | 0.3.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-test-unit | 3.6.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-typeprof | 0.21.9-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem4.0-bigdecimal | 4.0.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-devel +2 | 4.0.16-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-io-console | 0.8.2-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-irb | 1.16.0-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-json | 2.18.0-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-minitest | 6.0.0-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-power_assert | 3.0.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-psych | 5.3.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-racc | 1.8.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rake | 13.3.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rbs | 3.10.0-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rdoc | 7.0.4-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rexml | 3.4.4-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rss | 0.3.2-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-test-unit | 3.7.5-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-typeprof | 0.31.1-37.3.hum1 | RHSA-2026:62563 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | openssl +3 | 1:3.5.8-1.el9_8 | ALSA-2026:67165 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | openssl-3 | 3.5.0-150700.5.50.1 | SUSE-SU-2026:4039-1 |
| SLES 15 SP6 | openssl-3 | 3.1.4-150600.5.64.1 | SUSE-SU-2026:3866-1 |
| SLES 15 SP5 | openssl-3 | 3.0.8-150500.5.75.1 | SUSE-SU-2026:3876-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.98.1 | SUSE-SU-2026:4032-1 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | openssl-3 | 3.5.0-160000.10.1 | SUSE-SU-2026:23609-1 |
| SLES for SAP 15 SP6 | openssl-3 | 3.1.4-150600.5.64.1 | SUSE-SU-2026:3866-1 |
| SLES for SAP 15 SP5 | openssl-3 | 3.0.8-150500.5.75.1 | SUSE-SU-2026:3876-1 |
| SLES for SAP 15 SP4 | openssl-3 | 3.0.8-150400.4.98.1 | SUSE-SU-2026:4032-1 |
| SLES 16.0 | openssl-3 | 3.5.0-160000.10.1 | SUSE-SU-2026:23609-1 |
| SLE Micro 6.2 | openssl-3 | 3.5.0-160000.10.1 | SUSE-SU-2026:23463-1 |
| SLE Micro 6.1 | openssl-3 | 3.1.4-slfo.1.1_13.1 | SUSE-SU-2026:23512-1 |
| SLE Micro 6.0 | openssl-3 | 3.1.4-17.1 | SUSE-SU-2026:23473-1 |
| SLE Micro 5.4 | openssl-3 | 3.0.8-150400.4.98.1 | SUSE-SU-2026:4032-1 |
| SLE Micro 5.3 | openssl-3 | 3.0.8-150400.4.98.1 | SUSE-SU-2026:4032-1 |
| SLE HPC 15 SP5 | openssl-3 | 3.0.8-150500.5.75.1 | SUSE-SU-2026:3876-1 |
| SLE HPC 15 SP4 | openssl-3 | 3.0.8-150400.4.98.1 | SUSE-SU-2026:4032-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-3 | 3.5.3-8.1 | openSUSE-SU-2026:11623-1 |
| openSUSE Leap 16.0 | openssl-3 | 3.5.0-160000.10.1 | openSUSE-SU-2026:21744-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssl | 3.5.8-r0 | — |
| Alpine v3.23 | openssl | 3.5.8-r0 | — |
| Alpine v3.22 | openssl | 3.5.8-r0 | — |
| Alpine v3.21 | openssl | 3.3.7-r1 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssl +5 | 1:3.5.8-1.amzn2023.0.1 | ALAS2023-2026-2136 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | edk2 | 20240524git3e722403cd16-20 | — |
| Azure Linux 3 | openssl | 3.3.7-6 | — |
| Azure Linux 3 | openssl-fips-provider | No fix yet | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl-4.0 +2 | 4.0.2-r0 | — |
Advisories 27
- WID-SEC-2026-3005 OpenSSL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
- ALSA-2026:67165 Important: openssl security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- NCSC-2026-0445 Kwetsbaarheden verholpen in Oracle Analytics NCSC-NL (Netherlands) · Oct 21, 2026
- WID-SEC-2026-4061 Oracle Database Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 20, 2026
- RHSA-2026:62562 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:62563 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:59635 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:59641 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:55543 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:42825 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:62786 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:59260 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- WID-SEC-2026-3642 Meinberg LANTIME: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2026
- USN-8865-1 edk2 vulnerabilities Ubuntu Security Notices (USN) · Oct 5, 2026
- SUSE-SU-2026:23609-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23512-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Sep 16, 2026
- SUSE-SU-2026:23473-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Sep 14, 2026
- SUSE-SU-2026:23463-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Sep 14, 2026
- ALAS2023-2026-2136 Important: openssl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Sep 14, 2026
- SUSE-SU-2026:4032-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:4039-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:3876-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Sep 10, 2026
- SUSE-SU-2026:3866-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Sep 10, 2026
- openSUSE-SU-2026:21744-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Sep 9, 2026
- USN-8678-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Sep 3, 2026
- USN-8678-3 openssl vulnerability Ubuntu Security Notices (USN) · Sep 3, 2026
- openSUSE-SU-2026:11623-1 libopenssl-3-devel-3.5.3-8.1 on GA media SUSE / openSUSE Security Updates · Aug 28, 2026
References
- OpenSSL Advisory vendor-advisory
- 4.0.2 git commit patch
- 3.6.4 git commit patch
- 3.5.8 git commit patch
- 3.4.7 git commit patch
- 3.0.22 git commit patch