-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 06 Jan 2026 01:08:17 +0530 Source: libsodium Built-For-Profiles: noudeb Architecture: source Version: 1.0.18-1+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Closes: 1124374 Changes: libsodium (1.0.18-1+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * core_ed25519_is_valid_point: check Y==Z in addition to X==0. (Fixes: CVE-2025-69277) (Closes: #1124374) Checksums-Sha1: b6436c03a43987d3c96faf4009aa4052d0787650 1974 libsodium_1.0.18-1+deb11u1.dsc cd8a76b79aeb077e8d3eea478ea6241972593dfd 1619527 libsodium_1.0.18.orig.tar.gz 98864c14d644f40ddf3293c4a397d4c2c30434d7 8156 libsodium_1.0.18-1+deb11u1.debian.tar.xz eff6bb78b2cedabcdac3d8ccfdf4b2c9e4f4c963 7314 libsodium_1.0.18-1+deb11u1_source.buildinfo Checksums-Sha256: 0da92f2fddf374b1d273a8b27856b3aa85db9001ef1246cc2180e7420f4cbbfd 1974 libsodium_1.0.18-1+deb11u1.dsc d59323c6b712a1519a5daf710b68f5e7fde57040845ffec53850911f10a5d4f4 1619527 libsodium_1.0.18.orig.tar.gz 27cf5578bf773cebd4201bfbd8e1185db3c72a11c941be3d422fb66ea46d5c82 8156 libsodium_1.0.18-1+deb11u1.debian.tar.xz ca88b817a66e2c8aa2c4fa9c20c08ac121a584a619406f799f3c7f6b5b9dc1f7 7314 libsodium_1.0.18-1+deb11u1_source.buildinfo Files: e8472ceed79157593de9d0fb2275f255 1974 libs optional libsodium_1.0.18-1+deb11u1.dsc 94a783f33ff8a97a09708bc61370d280 1619527 libs optional libsodium_1.0.18.orig.tar.gz d2eebf42d931bd8a0936c0d594db5fdd 8156 libs optional libsodium_1.0.18-1+deb11u1.debian.tar.xz 723e9a07f961835f412dc0565530e291 7314 libs optional libsodium_1.0.18-1+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmleVksTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlk7VD/9+yWkNYQHS1kn5xi+tpwn+8dwFPYiw pXSjvt/nf2unWy6IEPBWXwdiBr+ylbaju3E6TeiKNFJ02GumHyh+AfON1bxxw/zm YnpjW5krWytA1eeknwmv6prY/aOFe3UJ0npe7hRo3ojcuLeidUwGUJ7KN+w7Y13f 8lzw8B9oRLqhra2a5N/o8hNfiwKd4L16bCjOTgR4zh25m7zilrQ+eXrRQaESnCzn FAyrxgGC9/Q86ykIRIBv6eWdSrSSMfQYJlQSyH+GAoD97W49L25/raejfdcdXSVQ DrtvzMCceaRam2cwrrEagmE0FGsayaXuiOu9NB72yQ+oZ4WuYGXUZHfvE6GBqAkA C+VYn9QnxpdD0eGRV/TJWlWCIu9qvJZOesUbJbpNn/i0K2XxzCO7dglf5SxOdnml S2IMRKDFuxISIjKPI9ETdjGVOJfnxD4ZNk/B2ULREWiLj0+nrIoCiei5LoafMJj1 qiKdFKUNg2etna41c2lXmun9LG5JsGkZT/3AZ3D0Abzul8Ff/8x9/Bt5R8RqnN5q lMEFH1QYYxD9ZxLaFf1wnnu+fQh0NCgWINlLZ8EWxuivbdd5+qnHVgkhC9tZCz03 yeNxDv9vSf27oYK0MuEq0OJBpbUHniLZfkFSHmz6e3I6c2LDzVi516awIX/9kH24 f7B8nwo4pJCcCA== =bxZ6 -----END PGP SIGNATURE-----
