AZL-89876 CVE-2026-45445 affecting package edk2 for versions less than 20240524git3e722403cd16-18

Issue summary: When an application drives an AES-OCB context through the public EVPCipher one-shot interface, the application-supplied initialisation vector IV is silently discarded. Impact summary: Every message encrypted under the same key uses the same effective nonce regardless of the IV...

AZL-89793 CVE-2026-45445 affecting package openssl-fips-provider 3.1.2-2

Issue summary: When an application drives an AES-OCB context through the public EVPCipher one-shot interface, the application-supplied initialisation vector IV is silently discarded. Impact summary: Every message encrypted under the same key uses the same effective nonce regardless of the IV...