SUSE-SU-2026:0368-1
SUSE-SU-2026:0368-1 · Security update for libsodium
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070). - CVE-2025-69277: Fixed incorrect validation of elliptic curve points in crypto_core_ed25519_is_valid_point function (bsc#1255764).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
libsodium SUSE:Linux Enterprise Micro 5.3
- Affected ranges
- ECOSYSTEM: < 1.0.18-150000.4.14.1
Update to 1.0.18-150000.4.14.1
libsodium SUSE:Linux Enterprise Micro 5.4
- Affected ranges
- ECOSYSTEM: < 1.0.18-150000.4.14.1
Update to 1.0.18-150000.4.14.1
libsodium SUSE:Linux Enterprise Micro 5.5
- Affected ranges
- ECOSYSTEM: < 1.0.18-150000.4.14.1
Update to 1.0.18-150000.4.14.1
libsodium SUSE:Linux Enterprise Module for Basesystem 15 SP7
- Affected ranges
- ECOSYSTEM: < 1.0.18-150000.4.14.1
Update to 1.0.18-150000.4.14.1
libsodium SUSE:Linux Enterprise Micro 5.2
- Affected ranges
- ECOSYSTEM: < 1.0.18-150000.4.14.1
Update to 1.0.18-150000.4.14.1
libsodium openSUSE:Leap 15.6
- Affected ranges
- ECOSYSTEM: < 1.0.18-150000.4.14.1
Update to 1.0.18-150000.4.14.1