{
  "cveId": "CVE-2025-15444",
  "url": "https://patchblox.com/security/cve/CVE-2025-15444",
  "summary": "CVE-2025-15444 is fixed in 11 products on 1 platform, first by SUSE-SU-2026:0368-1, released February 3, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Crypt::Sodium::XS module versions prior to\u00A00.000042,\u00A0for Perl, include a vulnerable version of libsodium",
  "description": "This update for libsodium fixes the following issues:\n\nUpdate to 1.0.22 (jsc#PED-16890):\n\n  * Post-quantum key encapsulation is now available. ML-KEM768, the\n    NIST-standardized lattice-based KEM, is accessible through the\n    crypto_kem_mlkem768_*() functions.\n  * X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection\n    against both classical and quantum adversaries, is available through the\n    crypto_kem_*() functions. X-Wing is the recommended KEM for most\n    applications.\n  * SHA-3 hash functions are now available as crypto_hash_sha3256_*()\n    and crypto_hash_sha3512_*(), with both one-shot and streaming APIs.\n  * Performance: NEON optimizations for Argon2 on ARM platforms.\n  * Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when\n    available on ARM platforms.\n  * Performance: WebAssembly SIMD implementations of Argon2 have been added.\n  * XOF state alignment has been relaxed.\n  * crypto_core_keccak1600_state has been added.\n  * Export missing crypto_ipcrypt_nd_keygen() helper function.\n  * crypto_auth_hmacsha256_init and crypto_auth_hmacsha512_init now\n    accept NULL key pointers (with a zero key length), for consistency with\n    other _init functions.\n  * Fixed compilation with GCC on aarch64 and gcc 4.x.\n  * On aarch64, aes256-gcm is now enabled even when not using clang,\n    including MSVC.\n  * Libsodium can be directly used as a dependency in a Zig project.\n\nUpdate to 1.0.21 (bsc#1256070, CVE-2025-15444, bsc#1255764, CVE-2025-69277):\n\n  * The new crypto_ipcrypt_* functions implement mechanisms for securely\n    encrypting and anonymizing IP addresses.\n  * The sodium_bin2ip and sodium_ip2bin helper functions have been added to\n    complement the crypto_ipcrypt_* functions and easily convert addresses\n    between bytes and strings.\n  * XOF: the crypto_xof_shake* and crypto_xof_turboshake* functions are\n  * standard\n    extendable output functions. From input of any length, they can derive\n    output of any length with the same properties as hash functions. These\n    primitives are required by many post-quantum mechanisms, but can also be\n    used for a wide range of applications, including key derivation, session\n    encryption and more.\n  * Performance of AES256-GCM and AEGIS on ARM has been improved with some\n    compilers\n  * Security: optblockers have been introduced in critical code paths to prevent\n    compilers from introducing unwanted side channels via conditional jumps. This\n    was observed on RISC-V targets with specific compilers and options.\n  * Security: crypto_core_ed25519_is_valid_point() now properly rejects\n    small-order points that are not in the main subgroup\n  * ((nonnull)) attributes have been relaxed on some crypto_stream* functions to\n    allow NULL output buffers when the output length is zero\n  * A cross-compilation issue with old clang versions has been fixed\n  * crypto_aead_aes256gcm_is_available is exported to JavaScript\n  * Security: memory fences have been added after MAC verification in AEAD to\n    prevent speculative access to plaintext before authentication is complete\n  * Assembly files now include .gnu.property notes for proper IBT and Shadow\n    Stack support when building with CET instrumentation.\n\nUpdate to 1.0.20:\n\n  * build system updates and portability fixes\n\nIncludes changes from 1.0.19:\n\n  * New AEADs: AEGIS-128L and AEGIS-256\n  * The HKDF key derivation mechanism, required by many standard\n\n    protocols\n  - A test designed to trigger an OOM condition didn\u0027t work on\n    Linux systems with memory overcommit turned on. It has been\n  - Emscripten: UTF8ToString() is now exported since\n  - New target: WebAssembly/WASI\n  - New functions to map a hash to an edwards25519 point\n    or get a random point:\n  - crypto_core_ed25519_scalar_mul() has been implemented for\n  - Support for the Ristretto group has been implemented for\n  - Bug fix: sodium_pad() didn\u0027t properly support block sizes\n  - JS/WebAssembly: some old iOS versions can\u0027t instantiate the\n    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn\u0027t\n    returnEINVAL\u0060 on input strings with a short length, unlike\n  - Added a workaround for Visual Studio 2010 bug causing CPU\n  - New low-level APIs for arithmetic mod the order of the prime\n  - crypto_core_ed25519_scalar_random(),\n  - crypto_core_ed25519_scalar_invert(),\n  - crypto_core_ed25519_scalar_complement(),\n    crypto_core_ed25519_scalar_add() and\n    crypto_scalarmult_ed25519_base_noclamp() and\n    crypto_scalarmult_ed25519_noclamp().\n\n  * AVX2 detection is more reliable.\n\n    Intel platforms. crypto_generichash() is now faster than MD5 and\n  * In addition to sodium_bin2hex(), sodium_hex2bin() is now a\n  * crypto_generichash_statebytes(), crypto_auth_*_statebytes()\n    and crypto_hash_*_statebytes() have been added in order to\n    retrieve the size of structures keeping states from foreign\n  * The JavaScript target doesn\u0027t require /dev/urandom or an\n    external randombytes() implementation any more. Other minor\n    Emscripten-related improvements have been made in order to\n  * Custom randombytes implementations do not need to provide\n    their own implementation of randombytes_uniform() any more.\n    randombytes_stir() and randombytes_close() can also be NULL\n  * On Linux, getrandom(2) is being used instead of directly\n    accessing /dev/urandom, if the kernel supports this system\n\nAlso libsodium users were rebuilt: zeromq, dnsdist, unbound, php7, and usbguard.",
  "published": "2026-01-09T01:10:52Z",
  "severity": "Important",
  "cvss": 8.6,
  "cwe": "Dependency on Vulnerable Third-Party Component",
  "epss": 0.0027,
  "epssPercentile": 0.19411,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15444",
  "fixes": [
    {
      "platform": "linux",
      "product": "apache2-mod_php7",
      "release": "sles 15.6",
      "fixedVersion": "7.4.33-150400.4.75.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "apache2-mod_php7",
      "release": "sles 15.7",
      "fixedVersion": "7.4.33-150400.4.75.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "dnsdist",
      "release": "sles 15.6",
      "fixedVersion": "1.8.0-150400.9.8.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "dnsdist",
      "release": "sles 15.7",
      "fixedVersion": "1.9.12-150700.3.11.2",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "libsodium",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.0.18-150000.4.14.1",
      "fix": "SUSE-SU-2026:0368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0368-1",
      "released": "2026-02-03T13:40:57Z"
    },
    {
      "platform": "linux",
      "product": "libsodium",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "1.0.20-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20399-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20399-1",
      "released": "2026-03-19T08:18:59Z"
    },
    {
      "platform": "linux",
      "product": "libsodium",
      "release": "sles 15.6",
      "fixedVersion": "1.0.22-150000.4.17.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "libsodium",
      "release": "sles 15.7",
      "fixedVersion": "1.0.22-150000.4.17.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "libsodium",
      "release": "sles 16.0",
      "fixedVersion": "1.0.20-160000.3.1",
      "fix": "SUSE-SU-2026:20913-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20913-1",
      "released": "2026-03-19T08:17:20Z"
    },
    {
      "platform": "linux",
      "product": "php7",
      "release": "sles 15.6",
      "fixedVersion": "7.4.33-150400.4.75.2",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "php7",
      "release": "sles 15.7",
      "fixedVersion": "7.4.33-150400.4.75.2",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "php7-embed",
      "release": "sles 15.7",
      "fixedVersion": "7.4.33-150400.4.75.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "php7-fastcgi",
      "release": "sles 15.6",
      "fixedVersion": "7.4.33-150400.4.75.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "php7-fastcgi",
      "release": "sles 15.7",
      "fixedVersion": "7.4.33-150400.4.75.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "php7-fpm",
      "release": "sles 15.6",
      "fixedVersion": "7.4.33-150400.4.75.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "php7-fpm",
      "release": "sles 15.7",
      "fixedVersion": "7.4.33-150400.4.75.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "php7-test",
      "release": "sles 15.7",
      "fixedVersion": "7.4.33-150400.4.75.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "unbound",
      "release": "sles 15.6",
      "fixedVersion": "1.25.2-150600.23.21.4",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "unbound",
      "release": "sles 15.7",
      "fixedVersion": "1.25.2-150600.23.21.4",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "usbguard",
      "release": "sles 15.6",
      "fixedVersion": "1.1.2-150500.6.2.2",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "usbguard",
      "release": "sles 15.7",
      "fixedVersion": "1.1.2-150500.6.2.2",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "zeromq",
      "release": "sles 15.6",
      "fixedVersion": "4.2.3-150000.3.17.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    },
    {
      "platform": "linux",
      "product": "zeromq",
      "release": "sles 15.7",
      "fixedVersion": "4.2.3-150000.3.17.1",
      "fix": "SUSE-SU-2026:4368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4368-1",
      "released": "2026-09-28T15:06:19Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}