11 matches found
ROOT-APP-PYPI-CVE-2025-69277 CVE-2025-69277 in rootio-PyNaCl - Patched by Root
Root has patched CVE-2025-69277 in the rootio-PyNaCl package for Root:PyPI. Multiple fixed versions available...
SUSE SLES16 Security Update : python-PyNaCl (SUSE-SU-2026:21431-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:21431-1 advisory. Security fixes: - CVE-2025-69277: incorrect validation of elliptic curve points certain custom cryptography or untrusted data to...
openSUSE 16 Security Update : python-PyNaCl (openSUSE-SU-2026:20650-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20650-1 advisory. Security fixes: - CVE-2025-69277: incorrect validation of elliptic curve points certain custom cryptography or untrusted data to...
Security update for python-PyNaCl (moderate)
openSUSE security update: security update for python-pynacl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20650-1 Rating: moderate References: bsc1161557 bsc1199282 bsc1255764 Cross-References: CVE-2025-69277 CVSS scores: CVE-2025-69277 SUSE : 4.4...
OPENSUSE-SU-2026:20650-1 Security update for python-PyNaCl
This update for python-PyNaCl fixes the following issues: Security fixes: - CVE-2025-69277: incorrect validation of elliptic curve points certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint function bsc1255764. Other fixes: - update to 1.6.2 bsc1255764, CVE-2025-69277:...
libsodium: pynacl: libsodium: Improper validation of elliptic curve points could lead to data integrity or information disclosure.
A flaw was found in libsodium and pynacl. When processing untrusted data in specific cryptographic operations, the library's cryptocoreed25519isvalidpoint function incorrectly validates elliptic curve points. This improper validation could allow an attacker to bypass security checks, potentially...
Security Bulletin: IBM Edge Data Collector uses PyNaCl-1.4.0-cp35-abi3-manylinux1_x86_64.whl which is vulnerable to CVE-2025-69277.
Summary IBM Edge Data Collector uses PyNaCl-1.4.0-cp35-abi3-manylinux1x8664.whl which is vulnerable to CVE-2025-69277. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-69277 DESCRIPTION: libsodium before ad3004e, in atypical use cases involving...
python311-PyNaCl-1.6.2-1.1 on GA media (moderate)
python311-PyNaCl-1.6.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10130-1 Rating: moderate Cross-References: CVE-2025-69277 CVSS scores: CVE-2025-69277 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2025-69277 SUSE : 4.8...
OPENSUSE-SU-2026:10130-1 python311-PyNaCl-1.6.2-1.1 on GA media
These are all security issues fixed in the python311-PyNaCl-1.6.2-1.1 package on the GA media of openSUSE Tumbleweed...
0lever-utils (>=0.0.2 <=0.0.7), a2grunnerp (>=0.1.0 <=0.1.8) +440 more potentially affected by CVE-2025-69277 via pynacl (>=1.0.1 <=1.6.1)
pynacl PYPI version =1.0.1, =0.0.2, =0.1.0, =1.1.0, =1.0.1, =0.1.0, =0.5.6, =0.1.0.post1, =0.5.1, =0.18.0.3, =1.0.0, =1.1.0, =1.0.5, =1.0.6 and more Source cves: CVE-2025-69277 Source advisory: OSV:GHSA-MRFV-M5WM-5W6W...
NewStart CGSL MAIN 7.02 : python-pynacl Vulnerability (NS-SA-2025-0193)
The remote NewStart CGSL host, running version MAIN 7.02, has python-pynacl packages installed that are affected by a vulnerability: - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks suc...