-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 01 Jan 2026 10:38:08 +0100 Source: libsodium Binary: libsodium-dev libsodium23 libsodium23-dbgsym Architecture: arm64 Version: 1.0.18-1+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Laszlo Boszormenyi (GCS) Description: libsodium-dev - Network communication, cryptography and signaturing library - hea libsodium23 - Network communication, cryptography and signaturing library Closes: 1124374 Changes: libsodium (1.0.18-1+deb12u1) bookworm-security; urgency=medium . * Backport security fix for CVE-2025-69277: mishandled checks for whether an elliptic curve point is valid (closes: #1124374). Checksums-Sha1: 84ccb2d7239cb160b20d9ad1fa5dbf4ed6ea13c7 136560 libsodium-dev_1.0.18-1+deb12u1_arm64.deb cf142ee4f787ed6303c5b6646b71834f1b1dea98 310852 libsodium23-dbgsym_1.0.18-1+deb12u1_arm64.deb 3fea587a825a1c4360806da37a27fc5b28e31190 117556 libsodium23_1.0.18-1+deb12u1_arm64.deb 78f44ce705f3a95779d7874a71d09c031fcb1da7 6680 libsodium_1.0.18-1+deb12u1_arm64-buildd.buildinfo Checksums-Sha256: 6713440c957b2581bc7deab164ea99e80eab784c1004080c7a034fe6d95d178a 136560 libsodium-dev_1.0.18-1+deb12u1_arm64.deb 081d1c93624ed3679e6217597af87612c8e1e2696dc2666acdd60064cc875831 310852 libsodium23-dbgsym_1.0.18-1+deb12u1_arm64.deb 9ba45ca22ac46604f1ac2a48cd1dc9f38f8e72bcd84e51f65be2c89400017d7d 117556 libsodium23_1.0.18-1+deb12u1_arm64.deb 5a72f20056a9b1915cdd20b743be7802ace68de72b9a18d87a87e80e14d53616 6680 libsodium_1.0.18-1+deb12u1_arm64-buildd.buildinfo Files: 5b27fdca045e7524055c9bbd62594c6c 136560 libdevel optional libsodium-dev_1.0.18-1+deb12u1_arm64.deb ed09d7b4931766fead7f008d56b3b14e 310852 debug optional libsodium23-dbgsym_1.0.18-1+deb12u1_arm64.deb a71115179b8de9c3238a604a73acd3bd 117556 libs optional libsodium23_1.0.18-1+deb12u1_arm64.deb 20524151d3ddde26002f75865d5bf79e 6680 libs optional libsodium_1.0.18-1+deb12u1_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmlXvDwACgkQXVp1sEH/ 1mKyyg//QTl9ZEoiwUXGyRdc4OymzYSWC47I95mcLKuW7X43Hnf86Rly7fAHSIf7 vgVZYeb3RLosF6oKiRwo8mVhScswZIw58MmECVppvbj3yzgJJ86Q6+pZyekUC/wu mIXroPYqdAhjXn2WCVt4fuYI2TVyOmLXuMsr/ur8nJ2QM+klzcxWEGmUx2Epk+Z1 Va3PZoILaldXg1oNcxMY7hiR5Z4cSLpMvjoXCm+PHM4PtW0C6uzPKuQjSLJ6cawx dxAXRrNFpZ3Da3kgcNRK9fwvC0J8ZD1C3I0lidHhA+tCzKKSttCTx3eVRd6vbG3Q WBb/LYrst4xaXthQARTyb/m7oZ/yRcrqwDEmPZw/x3gSGZZtLlgPrq6OuT2FjLUJ IrTPP9eftZAAS7wry1lTbxJpgOKQelUfhLDnFAAi3daYW+WS1ZwlgK/AuJ5JnjrR 0Y4+EViA1AUCYI43y/x8foKn0CpQaQ7Y1yBoNzjAa706/ucWPIczlx4wchd0Epk9 8ad6U9lodPERl0R8c98hcXFudD7pHjt1W808ZDDho4sB/6myuKm2JcMwCsq/TVxX Fb+cmMJQYDbIsjB1g5jWtg86hEUDwnD2YSmdUlgmzFhjxOWYiyO9aoqfO46bXA4N 6xzDOJvVJpgMEM4P8597TU53IdOSBosmg8KUEh4jcPC2AVSaU00= =dQij -----END PGP SIGNATURE-----