Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0223-1

Опубликовано: 22 янв. 2026
Источник: suse-cvrf

Описание

Security update for libsodium

This update for libsodium fixes the following issues:

  • CVE-2025-15444: fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).

Список пакетов

Container suse/manager/4.3/proxy-salt-broker:latest
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP4-BYOS
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP4-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP4-Hardened-BYOS
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP4-Hardened-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP4-SAP-Hardened-BYOS
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP5-BYOS-EC2
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP5-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP5-Hardened-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP5-SAP-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-Azure-3P
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-BYOS
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-BYOS-Azure
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-Hardened-BYOS
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-Hardened-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-SAP-Azure-3P
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-SAP-Hardened-BYOS
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP6-SAP-Hardened-EC2
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-Azure-3P
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-Azure-Basic
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-Azure-Standard
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-BYOS-Azure
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-BYOS-EC2
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-HPC-Azure
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-HPC-BYOS-EC2
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-HPC-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-Hardened-BYOS-Azure
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-Hardened-BYOS-EC2
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-Hardened-BYOS-GCE
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-SAP-Azure
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-SAP-Azure-3P
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-SAP-EC2
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-SAP-Hardened-Azure
libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP7-SAPCAL-Azure
libsodium23-1.0.18-150000.4.11.1
SUSE Linux Enterprise Micro 5.2
libsodium23-1.0.18-150000.4.11.1
SUSE Linux Enterprise Micro 5.3
libsodium23-1.0.18-150000.4.11.1
SUSE Linux Enterprise Micro 5.4
libsodium23-1.0.18-150000.4.11.1
SUSE Linux Enterprise Micro 5.5
libsodium23-1.0.18-150000.4.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libsodium-devel-1.0.18-150000.4.11.1
libsodium23-1.0.18-150000.4.11.1
libsodium23-32bit-1.0.18-150000.4.11.1
openSUSE Leap 15.6
libsodium-devel-1.0.18-150000.4.11.1
libsodium23-1.0.18-150000.4.11.1
libsodium23-32bit-1.0.18-150000.4.11.1

Ссылки

Описание

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium <= 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://www.cve.org/CVERecord?id=CVE-2025-69277 . The libsodium vulnerability states: In atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. 0.000042 includes a version of libsodium updated to 1.0.20-stable, released January 3, 2026, which includes a fix for the vulnerability.

Затронутые продукты
Container suse/manager/4.3/proxy-salt-broker:latest:libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP4-BYOS-GCE:libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP4-BYOS:libsodium23-1.0.18-150000.4.11.1
Image SLES15-SP4-Hardened-BYOS-GCE:libsodium23-1.0.18-150000.4.11.1
Ссылки
Уязвимость SUSE-SU-2026:0223-1