CVE catalog

CVE-2025-15444

Security update for libsodium

[CVE catalog]

Severity
Medium · CVSS 6.8CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.27% · Oct 25, 2026

This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Suselibsodiumlinux enterprise server 16.01.0.20-160000.3.1fixed
Suselibsodiumlinux enterprise server for sap applications 16.01.0.20-160000.3.1fixed
Opensuselibsodiumleap 16.01.0.20-160000.3.1fixed
Suselibsodiumlinux micro 6.21.0.20-160000.3.1fixed
Opensuselibsodiumtumbleweed1.0.21-1.1fixed
Suselibsodiumlinux micro 6.11.0.18-slfo.1.1_2.1fixed
Suselibsodiumlinux micro 6.11.0.18-slfo.1.1_3.1fixed
Suselibsodiumlinux micro 6.01.0.18-5.1fixed
Suselibsodiumlinux micro 6.01.0.18-4.1fixed
Suselibsodiumlinux enterprise micro 5.31.0.18-150000.4.14.1fixed
Suselibsodiumlinux enterprise micro 5.41.0.18-150000.4.14.1fixed
Suselibsodiumlinux enterprise micro 5.51.0.18-150000.4.14.1fixed
Suselibsodiumlinux enterprise module for basesystem 15 sp71.0.18-150000.4.14.1fixed
Suselibsodiumlinux enterprise micro 5.21.0.18-150000.4.14.1fixed
Opensuselibsodiumleap 15.61.0.18-150000.4.14.1fixed
Suselibsodiumlinux enterprise micro 5.31.0.18-150000.4.11.1fixed
Suselibsodiumlinux enterprise micro 5.41.0.18-150000.4.11.1fixed
Suselibsodiumlinux enterprise micro 5.51.0.18-150000.4.11.1fixed
Suselibsodiumlinux enterprise module for basesystem 15 sp71.0.18-150000.4.11.1fixed
Suselibsodiumlinux enterprise micro 5.21.0.18-150000.4.11.1fixed
Opensuselibsodiumleap 15.61.0.18-150000.4.11.1fixed
Suselibsodiumlinux enterprise module for public cloud 121.0.16-1.12.1fixed
Suselibsodiumlinux enterprise module for public cloud 121.0.16-1.15.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Suselibsodiumrpmlinux enterprise server 16.01.0.20-160000.3.1Not reportedSUSE-SU-2026:20913-1Not reported
Suselibsodiumrpmlinux enterprise server for sap applications 16.01.0.20-160000.3.1Not reportedSUSE-SU-2026:20913-1Not reported
Opensuselibsodiumrpmleap 16.01.0.20-160000.3.1Not reportedOPENSUSE-SU-2026:20399-1Not reported
Suselibsodiumrpmlinux micro 6.21.0.20-160000.3.1Not reportedSUSE-SU-2026:20756-1Not reported
Opensuselibsodiumrpmtumbleweed1.0.21-1.1Not reportedOPENSUSE-SU-2026:10022-1Not reported
Suselibsodiumrpmlinux micro 6.11.0.18-slfo.1.1_2.1Not reportedSUSE-SU-2026:20354-1Not reported
Suselibsodiumrpmlinux micro 6.11.0.18-slfo.1.1_3.1Not reportedSUSE-SU-2026:20484-1Not reported
Suselibsodiumrpmlinux micro 6.01.0.18-5.1Not reportedSUSE-SU-2026:20448-1Not reported
Suselibsodiumrpmlinux micro 6.01.0.18-4.1Not reportedSUSE-SU-2026:20242-1Not reported
Suselibsodiumrpmlinux enterprise micro 5.31.0.18-150000.4.14.1Not reportedSUSE-SU-2026:0368-1Not reported
Suselibsodiumrpmlinux enterprise micro 5.41.0.18-150000.4.14.1Not reportedSUSE-SU-2026:0368-1Not reported
Suselibsodiumrpmlinux enterprise micro 5.51.0.18-150000.4.14.1Not reportedSUSE-SU-2026:0368-1Not reported
Suselibsodiumrpmlinux enterprise module for basesystem 15 sp71.0.18-150000.4.14.1Not reportedSUSE-SU-2026:0368-1Not reported
Suselibsodiumrpmlinux enterprise micro 5.21.0.18-150000.4.14.1Not reportedSUSE-SU-2026:0368-1Not reported
Opensuselibsodiumrpmleap 15.61.0.18-150000.4.14.1Not reportedSUSE-SU-2026:0368-1Not reported
Suselibsodiumrpmlinux enterprise micro 5.31.0.18-150000.4.11.1Not reportedSUSE-SU-2026:0223-1Not reported
Suselibsodiumrpmlinux enterprise micro 5.41.0.18-150000.4.11.1Not reportedSUSE-SU-2026:0223-1Not reported
Suselibsodiumrpmlinux enterprise micro 5.51.0.18-150000.4.11.1Not reportedSUSE-SU-2026:0223-1Not reported
Suselibsodiumrpmlinux enterprise module for basesystem 15 sp71.0.18-150000.4.11.1Not reportedSUSE-SU-2026:0223-1Not reported
Suselibsodiumrpmlinux enterprise micro 5.21.0.18-150000.4.11.1Not reportedSUSE-SU-2026:0223-1Not reported
Opensuselibsodiumrpmleap 15.61.0.18-150000.4.11.1Not reportedSUSE-SU-2026:0223-1Not reported
Suselibsodiumrpmlinux enterprise module for public cloud 121.0.16-1.12.1Not reportedSUSE-SU-2026:0194-1Not reported
Suselibsodiumrpmlinux enterprise module for public cloud 121.0.16-1.15.1Not reportedSUSE-SU-2026:0482-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [libsodium26]Unknown

    Source package: [libsodium]

    Details (1)

    • 1.0.22-1.4 · x86_64 · tumbleweed

      Unknown · Fixed: 1.0.21-1.1

      Version impact unknown

      pypi · libsodium · opensuse · tumbleweed

  • [libsodium26-32bit]Unknown

    Source package: [libsodium]

    Details (1)

    • 1.0.22-1.4 · x86_64 · tumbleweed

      Unknown · Fixed: 1.0.21-1.1

      Version impact unknown

      pypi · libsodium · opensuse · tumbleweed

  • [libsodium-devel]Unknown

    Source package: [libsodium]

    Details (1)

    • 1.0.22-1.4 · x86_64 · tumbleweed

      Unknown · Fixed: 1.0.21-1.1

      Version impact unknown

      pypi · libsodium · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]