shield Security update for libsodium

SUSE-SLE-Module-Basesystem-15-SP7-2026-368

This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070). - CVE-2025-69277: Fixed incorrect validation of elliptic curve points in crypto_core_ed25519_is_valid_point function (bsc#1255764).

Release Date

Feb 3 2026
References

Bugzilla: 1255764, 1256070
CVEs: CVE-2025-69277, CVE-2025-15444
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.7 aarch64

Packages

libsodium
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock src

libsodium-devel
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock rpm

libsodium23
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock rpm

Basesystem Module 15.7 ppc64le

Packages

libsodium
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock src

libsodium-devel
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock rpm

libsodium23
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock rpm

Basesystem Module 15.7 s390x

Packages

libsodium
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock src

libsodium-devel
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock rpm

libsodium23
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock rpm

Basesystem Module 15.7 x86_64

Packages

libsodium
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock src

libsodium-devel
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock rpm

libsodium23
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock rpm

libsodium23-32bit
Portable NaCl-based crypto library

1.0.18-150000.4.14.1 lock rpm