<div class="container">
<h1>Recommended update for libsodium</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2026:22250-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-06-22T07:54:14Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-16206">jsc#PED-16206</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Micro 6.2</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that contains one feature can now be installed.</p>
<h2>Description:</h2>
<p>This update for libsodium fixes the following issues:</p>
<p>Changes in libsodium:</p>
<p>Update to 1.0.22: (jsc#PED-16206)</p>
<ul>
<li>Post-quantum key encapsulation is now available. ML-KEM768, the
NIST-standardized lattice-based KEM, is accessible through the
crypto_kem_mlkem768_*() functions.</li>
<li>X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection
against both classical and quantum adversaries, is available through the
crypto_kem_*() functions. X-Wing is the recommended KEM for most
applications.</li>
<li>SHA-3 hash functions are now available as crypto_hash_sha3256_<em>()
and crypto_hash_sha3512_</em>(), with both one-shot and streaming APIs.</li>
<li>Performance: NEON optimizations for Argon2 on ARM platforms.</li>
<li>Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when
available on ARM platforms.</li>
<li>Performance: WebAssembly SIMD implementations of Argon2 have been added.</li>
<li>XOF state alignment has been relaxed.</li>
<li>crypto_core_keccak1600_state has been added.</li>
<li>Export missing crypto_ipcrypt_nd_keygen() helper function.</li>
<li>crypto_auth_hmacsha256_init and crypto_auth_hmacsha512_init now
accept NULL key pointers (with a zero key length), for consistency with
other _init functions.</li>
<li>Fixed compilation with GCC on aarch64 and gcc 4.x.</li>
<li>On aarch64, aes256-gcm is now enabled even when not using clang,
including MSVC.</li>
<li>Libsodium can be directly used as a dependency in a Zig project.</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Micro 6.2
<br/>
<code>zypper in -t patch SUSE-SL-Micro-6.2-1012=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64)
<ul>
<li>libsodium-debugsource-1.0.22-160000.1.1</li>
<li>libsodium26-debuginfo-1.0.22-160000.1.1</li>
<li>libsodium26-1.0.22-160000.1.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://jira.suse.com/browse/PED-16206">https://jira.suse.com/browse/PED-16206</a>
</li>
</ul>
</div>