Debian has issued an advisory on January 5: https://lists.debian.org/debian-security-announce/2026/msg00002.html Fixed by: https://github.com/jedisct1/libsodium/commit/ad3004ec8731730e93fcfbbc824e67eadc1c1bae
Flags: (none) => affects_mga9+Whiteboard: (none) => MGA9TOOCVE: (none) => CVE-2025-69277Source RPM: (none) => sodium-1.0.20-2.mga10.src.rpm, sodium-1.0.18-3.mga9.src.rpmStatus comment: (none) => Patch available from upstream and Debian
For Cauldron, sodium-1.0.21-2.mga10 solves that issue.
Whiteboard: MGA9TOO => (none)Flags: affects_mga9+ => (none)Version: Cauldron => 9Source RPM: sodium-1.0.20-2.mga10.src.rpm, sodium-1.0.18-3.mga9.src.rpm => sodium-1.0.18-3.mga9.src.rpm
Suggested advisory: ======================== The updated packages fix a security vulnerability: Libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. (CVE-2025-69277) References: https://lists.debian.org/debian-security-announce/2026/msg00002.html ======================== Updated packages in core/updates_testing: ======================== lib(64)sodium23-1.0.18-3.1.mga9 lib(64)sodium-devel-1.0.18-3.1.mga9 from SRPM: sodium-1.0.18-3.1.mga9.src.rpm
Status: NEW => ASSIGNEDAssignee: bugsquad => qa-bugsStatus comment: Patch available from upstream and Debian => (none)
Keywords: (none) => advisory
RH installing lib64sodium23-1.0.18-3.1.mga9.x86_64.rpm from //home/katnatek/qa-testing/x86_64 Preparing... ##################################################################################### 1/1: lib64sodium23 ##################################################################################### 1/1: removing lib64sodium23-1.0.18-3.mga9.x86_64 ##################################################################################### 0ad say it requires sodium but the strace not fin evidence of lib, start one game, I'm not fan of these games :P , but not issues. Try with the megasync package in blodrake's repository, I get luck, the strace shows openat(AT_FDCWD, "/usr/lib64/libsodium.so.23", O_RDONLY|O_CLOEXEC) = 3
Whiteboard: (none) => MGA9-64-OK
Validating.
CC: (none) => andrewsfarm, sysadmin-bugsKeywords: (none) => validated_update
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2026-0004.html
Resolution: (none) => FIXEDStatus: ASSIGNED => RESOLVED