ELBA-2026-61224

ELBA-2026-61224 - libsodium Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2026-01-19

Description

[1.0.18-9]
- Security: crypto_core_ed25519_is_valid_point() now properly
rejects small-order points that are not in the main subgroup
CVE-2025-69277

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	libsodium-1.0.18-9.el9.src.rpm	b658e11a2cf75b8375af5b7343abb90a96564d9aa92e599bf95cf51021b560f4	-	ol9_x86_64_developer_EPEL
	libsodium-1.0.18-9.el9.x86_64.rpm	5d748f8a78c11f66301a779dcbe8cc0ab87c2c0d5f1b65f1aef17ad73767a503	-	ol9_x86_64_developer_EPEL
	libsodium-devel-1.0.18-9.el9.x86_64.rpm	37fc9b16d1453d4750541b1bf36d3500e44ae8121a3403803945cb9291ff46b9	-	ol9_x86_64_developer_EPEL
	libsodium-static-1.0.18-9.el9.x86_64.rpm	1342d93c1a8068ec821bba7b4b41c377556ec328876651d5aa2e381f2216767b	-	ol9_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team