-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 01 Jan 2026 10:36:18 +0100 Source: libsodium Binary: libsodium-dev libsodium23 libsodium23-dbgsym Architecture: amd64 Version: 1.0.18-1+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Laszlo Boszormenyi (GCS) Description: libsodium-dev - Network communication, cryptography and signaturing library - hea libsodium23 - Network communication, cryptography and signaturing library Closes: 1124374 Changes: libsodium (1.0.18-1+deb13u1) trixie-security; urgency=medium . * Backport security fix for CVE-2025-69277: mishandled checks for whether an elliptic curve point is valid (closes: #1124374). Checksums-Sha1: 8637813e2c1b3ddb13dbb27c5fbd0bbf437610ed 184532 libsodium-dev_1.0.18-1+deb13u1_amd64.deb d6bc2b20df68f144667c35ed0622b4f3f6393b91 796652 libsodium23-dbgsym_1.0.18-1+deb13u1_amd64.deb 55d9aee0bcd4a96e802ce3bd33f87f981b1b34d4 165028 libsodium23_1.0.18-1+deb13u1_amd64.deb f6e1cafe58fe1f26a5a1de76da4fc4d49d705eeb 6226 libsodium_1.0.18-1+deb13u1_amd64-buildd.buildinfo Checksums-Sha256: eb6425199b9ecd4a997a834be40dbef6ccf3974da9fe6b2c07cfed5d56423c40 184532 libsodium-dev_1.0.18-1+deb13u1_amd64.deb e85a976543bc5fbd34aa6ce8fafea0f0bb997591b66c5f67510866dd436090a6 796652 libsodium23-dbgsym_1.0.18-1+deb13u1_amd64.deb 9ff9d97bb7ce3aee7f6e6ec3a785cdbe237454a7b9fd84728121bc4ef2bebebe 165028 libsodium23_1.0.18-1+deb13u1_amd64.deb 8436c89899f9213fbf9b24406a7a16e373b64971e720f4d89a8d2397b54b78e4 6226 libsodium_1.0.18-1+deb13u1_amd64-buildd.buildinfo Files: 0168c37ea9a9899c67037f9a0f797ceb 184532 libdevel optional libsodium-dev_1.0.18-1+deb13u1_amd64.deb 14ad73d3a3f6df3fbbd2afbc9d51f017 796652 debug optional libsodium23-dbgsym_1.0.18-1+deb13u1_amd64.deb ffe701bd7c1b211e688db5d340f91304 165028 libs optional libsodium23_1.0.18-1+deb13u1_amd64.deb e53ff3c79c97fcb93f1758901052d643 6226 libs optional libsodium_1.0.18-1+deb13u1_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHqtYLkdKRyCY94K8fUw6/tXbAmMFAmlZZzgACgkQfUw6/tXb AmMoiBAAiRLvB4Uhjrk3GueiYMVnf2KEQXHCsMP4CsHJTZd9M9/XtTb1viF1CPMx gWv76g/P6AEQj6J80Xecj0LI1of6CEKUi/PbdDagM0SwcznRymZRGT73fMh3m4o0 ghUpfSPaz+3GWDkJ5kU52Buym+fxIKH0OO79mv9YJ4yNmnzqQwOZks/KQPa2efb2 5Y1Xi3z4zWKrWoDYa/ACSauCtULcuFaIBWWi5026RMrkDWTbntFZDuLHtluxxiyw J8F6SstRNCyKBb5b/d03J8PEv8o8bO9cdGUEl4A37eGUOWLi0J975OICc58KheFL FpYnRPN2hy7/ER6GZB1Cl+Xjb0NVuay4mNfpbkSvwPoHcgnyF8AWRE+WgjI3B8Jp TZ9p5iRiBHQ2vqbOqEA1SQqtfAyIwnsX47ZkqVlBph+lGYFsJRhYX3W5AWssNkdF whvpuDHOzTWVWgaRmxRrCK658z6kP8pq4r4Xp2Y+sIx9sf4stvTuYOOergEN9I5x 6Xy2VKo4OoSy1p139FciLGDtjn+L3WwXvqPRjBVeg1lQQXzNg1t7FD0dSqtbHBIw IbAkqQAMVonC63kxEVHpR50LKPdctiS/veDWCqZoGhTen/UpdNb6jbvlU1bSjiZk MxtrkHAy/i+H2vailZ9U22riNDqPFy+LB/sSNt4ULkcDi3PfviQ= =E/fU -----END PGP SIGNATURE-----