Description
The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| str4d | ed25519-java | ≤ 0.3.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libeddsa-java | 0.3.0-2.1 | — |
| Debian 13 | libeddsa-java | 0.3.0-2.1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | ruby-ed25519 +1 | No fix yet | — |
| Ubuntu 26.04 LTS | ruby-ed25519 +1 | No fix yet | — |
| Ubuntu 25.10 | ruby-ed25519 +1 | No fix yet | — |
| Ubuntu 24.04 LTS | ruby-ed25519 | No fix yet | — |
| Ubuntu 22.04 LTS | ruby-ed25519 | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | ruby-ed25519 | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | apache-sshd | 2.18.0-150200.5.11.1 | SUSE-SU-2026:2472-1 |
| SLES 15 SP7 | jpgpj | 1.3-150200.5.3.1 | SUSE-SU-2026:2472-1 |
| SLES 15 SP6 | apache-sshd | 2.18.0-150200.5.11.1 | SUSE-SU-2026:2472-1 |
| SLES 15 SP6 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
| SLES 15 SP6 | jpgpj | 1.3-150200.5.3.1 | SUSE-SU-2026:2472-1 |
| SLES 15 SP5 | apache-sshd | 2.18.0-150200.5.11.1 | SUSE-SU-2026:2472-1 |
| SLES 15 SP5 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
| SLES 15 SP5 | jpgpj | 1.3-150200.5.3.1 | SUSE-SU-2026:2472-1 |
| SLES 15 SP4 | apache-sshd | 2.18.0-150200.5.11.1 | SUSE-SU-2026:2472-1 |
| SLES 15 SP4 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
| SLES 15 SP4 | jpgpj | 1.3-150200.5.3.1 | SUSE-SU-2026:2472-1 |
| SLES 15 SP3 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | apache-sshd | 2.18.0-150200.5.11.1 | SUSE-SU-2026:2472-1 |
| SLES for SAP 15 SP6 | jpgpj | 1.3-150200.5.3.1 | SUSE-SU-2026:2472-1 |
| SLES for SAP 15 SP5 | apache-sshd | 2.18.0-150200.5.11.1 | SUSE-SU-2026:2472-1 |
| SLES for SAP 15 SP5 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
| SLES for SAP 15 SP5 | jpgpj | 1.3-150200.5.3.1 | SUSE-SU-2026:2472-1 |
| SLES for SAP 15 SP4 | apache-sshd | 2.18.0-150200.5.11.1 | SUSE-SU-2026:2472-1 |
| SLES for SAP 15 SP4 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
| SLES for SAP 15 SP4 | jpgpj | 1.3-150200.5.3.1 | SUSE-SU-2026:2472-1 |
| SLES for SAP 15 SP3 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
| SLE HPC 15 SP5 | apache-sshd | 2.18.0-150200.5.11.1 | SUSE-SU-2026:2472-1 |
| SLE HPC 15 SP5 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
| SLE HPC 15 SP5 | jpgpj | 1.3-150200.5.3.1 | SUSE-SU-2026:2472-1 |
| SLE HPC 15 SP4 | apache-sshd | 2.18.0-150200.5.11.1 | SUSE-SU-2026:2472-1 |
| SLE HPC 15 SP4 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
| SLE HPC 15 SP4 | jpgpj | 1.3-150200.5.3.1 | SUSE-SU-2026:2472-1 |
| SLE HPC 15 SP3 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
| SUSE Enterprise Storage 7.1 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | apache-sshd | 2.18.0-1.1 | openSUSE-SU-2026:10919-1 |
| openSUSE Tumbleweed | ed25519-java | 0.3.0-6.1 | openSUSE-SU-2025:14892-1 |
| openSUSE Leap 15.6 | ed25519-java | 0.3.0-150200.5.9.1 | SUSE-SU-2025:1029-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | ed25519-java | 0.3.0-1 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | gradle-8 | 8.14.3-r5 | — |
| Wolfi rolling | jenkins-2-openjdk-21 | 2.544-r1 | — |
| Wolfi rolling | sonarqube +1 | No fix yet | — |
| Wolfi rolling | thingsboard +4 | 3.9.1-r2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.i2p:i2p | < 0.9.39 | 0.9.39 | GHSA-p53j-g8pw-4w5f |
| Maven | net.i2p.crypto:eddsa | <= 0.3.0 | — | GHSA-p53j-g8pw-4w5f |
Advisories 8
- SUSE-SU-2026:2472-1 Security update for apache-sshd, jpgpj SUSE / openSUSE Security Updates · Jun 20, 2026
- openSUSE-SU-2026:10919-1 apache-sshd-2.18.0-1.1 on GA media SUSE / openSUSE Security Updates · Jun 2, 2026
- SUSE-SU-2025:1029-1 Security update for ed25519-java SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14892-1 ed25519-java-0.3.0-6.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-2163 IBM App Connect Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 30, 2025
- WID-SEC-2025-0595 Jenkins Plugins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 17, 2025
- WID-SEC-2025-0828 Oracle Database Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 19, 2025
- NCSC-2025-0123 Kwetsbaarheden verholpen in Oracle Database Producten NCSC-NL (Netherlands) · Apr 16, 2025