-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 01 Jan 2026 10:36:18 +0100 Source: libsodium Binary: libsodium-dev libsodium23 libsodium23-dbgsym Architecture: arm64 Version: 1.0.18-1+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Laszlo Boszormenyi (GCS) Description: libsodium-dev - Network communication, cryptography and signaturing library - hea libsodium23 - Network communication, cryptography and signaturing library Closes: 1124374 Changes: libsodium (1.0.18-1+deb13u1) trixie-security; urgency=medium . * Backport security fix for CVE-2025-69277: mishandled checks for whether an elliptic curve point is valid (closes: #1124374). Checksums-Sha1: 9d4af61e9cec028d82e2ea4ab1ca697a36aaedc7 139932 libsodium-dev_1.0.18-1+deb13u1_arm64.deb bcbad584a4fddeeab133dd2d31b5d7be5e169cbf 322080 libsodium23-dbgsym_1.0.18-1+deb13u1_arm64.deb 283449abed3611000399635e3d5dc333b29c4c08 120444 libsodium23_1.0.18-1+deb13u1_arm64.deb 9c325ea030bd9331ab0787c78ab6960b70d7ae52 6213 libsodium_1.0.18-1+deb13u1_arm64-buildd.buildinfo Checksums-Sha256: 15ebade6ea8b253542a7a0c849d34043b9d143c524e2ed3ffc397c84f67a32fc 139932 libsodium-dev_1.0.18-1+deb13u1_arm64.deb e799ca88cd759dceb81931ea4b5df1ea053c6ae655039900e652589b0dbb7d6e 322080 libsodium23-dbgsym_1.0.18-1+deb13u1_arm64.deb d94fc46204b65a965e356ebc19f9f88aeb20a9c777cb9a6569e75f75d0ae5523 120444 libsodium23_1.0.18-1+deb13u1_arm64.deb babb775bb521b204df013f21c409bb4d9fe70e9dd2068ecd928f5f2fceb6e53e 6213 libsodium_1.0.18-1+deb13u1_arm64-buildd.buildinfo Files: e4fd6b00b5067c7e235b943d3de9e5ca 139932 libdevel optional libsodium-dev_1.0.18-1+deb13u1_arm64.deb 84eb50c9326e1977f3e299147e4f981c 322080 debug optional libsodium23-dbgsym_1.0.18-1+deb13u1_arm64.deb 207a64f494b466893fb011fbd788abc6 120444 libs optional libsodium23_1.0.18-1+deb13u1_arm64.deb f915ce986ef363ed79aa024ca4db6e25 6213 libs optional libsodium_1.0.18-1+deb13u1_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmlZZ0UACgkQVLd4YzMS DKFvrhAAsZ5A/bDej0X2pHLkyf8ImP5zIeX96720buCOzSceF+CGV/cLmzW56S8N Lnl0Wj05rOgQK7Cu2SeYYrGaU6IjEi48/DoSeMrJrJf2pPmaCEVCXGBzg+VdsQIW Vho+1AG22N6AnOfU/m6n4+KKjO+L8J2PuW7tP0EUg7XHs7u6CBOVT7GeDPUuAbej LYNEyG4QI9EoRgAsqvc5cVFicZ/1vSEVU8EZSnZZ7gmWqtS1yIho7UrzSwUC1xeP 6salsTekJ9wpWs9v1wqkJDS1BFoDEHERbsMUt4bgDWp2aIqhv15GNRE3Z6WU9BNz uk/PL37iuSez6rDx5Cf+DSh+Rr0MSJHgIt0wvUJI5myFCgPN/dtgM7gGjCA1NtDS 7eSyqB5S/frwhQnEU3z8aANSqFF7vkZnY47tTyCtdmBfOe2UUQZk779vhphhwK21 lz+7Bo2w8LfsvicBPrLv7WRYYKoPovZ24bX5qf9psdChPI498MCGJIyeIM1MtWvZ vNXq7NbmJmqhmR2D8RaWze3TAautYVb+woxLaBwZXcTDHDrUVF7VfxhZ6gDJselJ 0kiSN6MDqD2C1Dq8pa0FTOMChEw8JBU2L1A/smGLfR2Pwc3nUsInJaNiWKQBJUHs EgjV1cOlZ0Ksk31gWJlE5J3lzPabTkhejk3q3Nbc7JpSj64zbT4= =cgAu -----END PGP SIGNATURE-----