ELBA-2026-61177

ELBA-2026-61177 - libsodium Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2026-01-17

Description

[1.0.18-9]
- Security: crypto_core_ed25519_is_valid_point() now properly
rejects small-order points that are not in the main subgroup
CVE-2025-69277

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libsodium-1.0.18-9.el8.src.rpm	7062fe4faf6f417a92c0b3ee2f1bb36ff3af144c0184bdd58cc1a48083f18c98	-	ol8_aarch64_developer_EPEL
	libsodium-1.0.18-9.el8.aarch64.rpm	ce97d30659d630505a7c23d0c26f00f66629525c10bd7e60bb118bb75228a2c4	-	ol8_aarch64_developer_EPEL
	libsodium-devel-1.0.18-9.el8.aarch64.rpm	555b0b9d5533696c18f82bb1572b412ae39314d495672cf15581b08c5e0e545a	-	ol8_aarch64_developer_EPEL
	libsodium-static-1.0.18-9.el8.aarch64.rpm	f07d79ffe0634176c469c5c9ecb94472e650bf018108c1575b7504fadfb969eb	-	ol8_aarch64_developer_EPEL
Oracle Linux 8 (x86_64)	libsodium-1.0.18-9.el8.src.rpm	7062fe4faf6f417a92c0b3ee2f1bb36ff3af144c0184bdd58cc1a48083f18c98	-	ol8_x86_64_developer_EPEL
	libsodium-1.0.18-9.el8.x86_64.rpm	be98175f7d039468ae1381e12cd7c907bf404d77047446181deed7bb6128a857	-	ol8_x86_64_developer_EPEL
	libsodium-devel-1.0.18-9.el8.x86_64.rpm	a8e7dd7b68394c4b1b6dd800549f357ff6a326357706463d156895233c1ba00d	-	ol8_x86_64_developer_EPEL
	libsodium-static-1.0.18-9.el8.x86_64.rpm	2cd35dc9ba17003d33ae05fa916ddf4439ba24db5c87a81de88dc55479bfcac6	-	ol8_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team