Bug 2427278 (CVE-2025-15444)

Summary:	CVE-2025-15444 libsodium: libsodium: Cryptographic bypass via improper elliptic curve point validation
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	abarbaro, alizardo, anthomas, eglynn, ehelms, ggainey, gtanzill, jbuscemi, jchui, jhe, jjoyce, jschluet, juwatts, ktsao, lhh, mburns, mgarciac, mhulan, nboldt, nmoumoul, osousa, pcreech, psrna, rchan, smallamp, tmalecek
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in libsodium, a cryptographic library used for secure communication. When processing certain custom cryptographic data or untrusted inputs, the library's `crypto_core_ed25519_is_valid_point` function incorrectly validates elliptic curve points. This oversight could allow an attacker to bypass cryptographic security measures, potentially compromising the confidentiality and integrity of sensitive data.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2427346, 2427347, 2427348, 2427349, 2427350, 2427351, 2427352, 2427353, 2427354
Bug Blocks:

Description OSIDB Bzimport 2026-01-06 01:01:47 UTC

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium

libsodium <= 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277  https://www.cve.org/CVERecord?id=CVE-2025-69277 .

The libsodium vulnerability states:

In atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.

0.000042 includes a version of libsodium updated to 1.0.20-stable, released January 3, 2026, which includes a fix for the vulnerability.