38 matches found
PT-2026-88981
PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve. Attackers can provide LoginPackets with keys using different curves or non-EC key types to pass login verification but trigger an uncaught exceptio...
EulerOS Virtualization 2.13.0 : libsodium (EulerOS-SA-2026-2175)
According to the versions of the libsodium package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...
EulerOS Virtualization 2.10.1 : libsodium (EulerOS-SA-2026-2026)
According to the versions of the libsodium package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...
CVE-2026-45614
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4.11.0, on many of the ECDH shared secret paths, the public key isn't verified to be a point on the correct curve. By...
openSUSE 16 Security Update : python-PyNaCl (openSUSE-SU-2026:20650-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20650-1 advisory. Security fixes: - CVE-2025-69277: incorrect validation of elliptic curve points certain custom cryptography or untrusted data to...
PT-2026-36501
Name of the Vulnerable Software and Affected Versions Vanetza V2X version 26.02 Description A flaw in the GeoNetworking packet processing pipeline allows remote unauthorized attackers to cause a denial of service. The issue occurs because OpenSSL exceptions resulting from ECC point validation suc...
Security update for python-PyNaCl (moderate)
openSUSE security update: security update for python-pynacl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20650-1 Rating: moderate References: bsc1161557 bsc1199282 bsc1255764 Cross-References: CVE-2025-69277 CVSS scores: CVE-2025-69277 SUSE : 4.4...
OPENSUSE-SU-2026:20642-1 Security update for libsodium
This update for libsodium fixes the following issues: Security fixes: - CVE-2025-15444: Cryptographic bypass via improper elliptic curve point validation bsc1256070. - CVE-2025-69277: incorrect validation of elliptic curve points certain custom cryptography or untrusted data to...
Security update for libsodium (moderate)
openSUSE security update: security update for libsodium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20399-1 Rating: moderate References: bsc1256070 Cross-References: CVE-2025-15444 CVSS scores: CVE-2025-15444 SUSE : 6.8...
SUSE-SU-2026:20913-1 Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation bsc1256070...
Amazon Linux 2 : libsodium, --advisory ALAS2PHP8.2-2026-010 (ALASPHP8.2-2026-010)
The version of libsodium installed on the remote host is prior to 1.0.18-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2PHP8.2-2026-010 advisory. libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...
Huawei EulerOS: Security Advisory for libsodium (EulerOS-SA-2026-1370)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2026:20484-1 Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation bsc1256070. - CVE-2025-69277: Fixed incorrect validation of elliptic curve points in cryptocoreed25519isvalidpoint function bsc1255764...
SUSE SLES12 Security Update : libsodium (SUSE-SU-2026:0482-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0482-1 advisory. - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation bsc1256070. - CVE-2025-69277: Fixed...
Security update for libsodium
This update for libsodium fixes the following issues: CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation bsc1256070. CVE-2025-69277: Fixed incorrect validation of elliptic curve points in cryptocoreed25519isvalidpoint function bsc1255764. Patch Instructions: T...
Security update for libsodium
This update for libsodium fixes the following issues: CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation bsc1256070. CVE-2025-69277: Fixed incorrect validation of elliptic curve points in cryptocoreed25519isvalidpoint function bsc1255764. Patch Instructions: T...
SUSE-SU-2026:0368-1 Security update for libsodium
This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation bsc1256070. - CVE-2025-69277: Fixed incorrect validation of elliptic curve points in cryptocoreed25519isvalidpoint function bsc1255764...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libsodium (SUSE-SU-2026:0223-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0223-1 advisory. - CVE-2025-15444: fixed cryptographic bypass via improper elliptic curve point validation bsc1256070...
Security update for libsodium
This update for libsodium fixes the following issues: CVE-2025-15444: fixed cryptographic bypass via improper elliptic curve point validation bsc1256070. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...