< back to search

shield Security update for libsodium
SUSE-SLES-16.0-649

This update for libsodium fixes the following issues: Security fixes: - CVE-2025-15444: Cryptographic bypass via improper elliptic curve point validation (bsc#1256070). - CVE-2025-69277: incorrect validation of elliptic curve points certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point function (bsc#1255764). Other fixes: - Update to 1.0.21 * The new crypto_ipcrypt_* functions implement mechanisms for securely encrypting and anonymizing IP addresses. * The sodium_bin2ip and sodium_ip2bin helper functions have been added to complement the crypto_ipcrypt_* functions and easily convert addresses between bytes and strings. * XOF: the crypto_xof_shake* and crypto_xof_turboshake* functions are * standard extendable output functions. From input of any length, they can derive output of any length with the same properties as hash functions. These primitives are required by many post-quantum mechanisms, but can also be used for a wide range of applications, including key derivation, session encryption and more. * Performance of AES256-GCM and AEGIS on ARM has been improved with some compilers * Security: optblockers have been introduced in critical code paths to prevent compilers from introducing unwanted side channels via conditional jumps. This was observed on RISC-V targets with specific compilers and options. * Security: crypto_core_ed25519_is_valid_point() now properly rejects small-order points that are not in the main subgroup * ((nonnull)) attributes have been relaxed on some crypto_stream* functions to allow NULL output buffers when the output length is zero * A cross-compilation issue with old clang versions has been fixed * crypto_aead_aes256gcm_is_available is exported to JavaScript * Security: memory fences have been added after MAC verification in AEAD to prevent speculative access to plaintext before authentication is complete * Assembly files now include .gnu.property notes for proper IBT and Shadow Stack support when building with CET instrumentation.

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 s390x
  • Packages
    libsodium-devel
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
    libsodium26
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
  • Packages
    libsodium-devel
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
    libsodium26
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 aarch64
  • Packages
    libsodium-devel
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
    libsodium26
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
  • Packages
    libsodium-devel
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
    libsodium26
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
  • Packages
    libsodium-devel
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
    libsodium26
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
  • Packages
    libsodium-devel
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm
    libsodium26
    Portable NaCl-based crypto library
    1.0.21-160000.1.1 lock rpm