ELBA-2026-61135

ELBA-2026-61135 - libsodium Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2026-01-17

Description

[1.0.18-9]
- Security: crypto_core_ed25519_is_valid_point() now properly
rejects small-order points that are not in the main subgroup
CVE-2025-69277

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	libsodium-1.0.18-9.el8.src.rpm	7062fe4faf6f417a92c0b3ee2f1bb36ff3af144c0184bdd58cc1a48083f18c98	-	ol8_x86_64_developer_EPEL
	libsodium-1.0.18-9.el8.x86_64.rpm	be98175f7d039468ae1381e12cd7c907bf404d77047446181deed7bb6128a857	-	ol8_x86_64_developer_EPEL
	libsodium-devel-1.0.18-9.el8.x86_64.rpm	a8e7dd7b68394c4b1b6dd800549f357ff6a326357706463d156895233c1ba00d	-	ol8_x86_64_developer_EPEL
	libsodium-static-1.0.18-9.el8.x86_64.rpm	2cd35dc9ba17003d33ae05fa916ddf4439ba24db5c87a81de88dc55479bfcac6	-	ol8_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team