FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2026-01-11 15:40:29 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
583b63f5-ebae-11f0-939f-47e3830276dd	security/libsodium -- crypto_core_ed25519_is_valid_point mishandles checks for whether an elliptic curve point is valid Libsodium maintainer reports: The function crypto_core_ed25519_is_valid_point(), a low-level function used to check if a given elliptic curve point is valid, was supposed to reject points that aren't in the main cryptographic group, but some points were slipping through. Discovery 2025-12-30 Entry 2026-01-07 libsodium < 1.0.21 CVE-2025-69277 https://00f.net/2025/12/30/libsodium-vulnerability/

VuXML ID

Description

583b63f5-ebae-11f0-939f-47e3830276dd

security/libsodium -- crypto_core_ed25519_is_valid_point mishandles checks for whether an elliptic curve point is valid

Libsodium maintainer reports:

The function crypto_core_ed25519_is_valid_point(), a low-level function used to check if a given elliptic curve point is valid, was supposed to reject points that aren't in the main cryptographic group, but some points were slipping through.

Discovery 2025-12-30
Entry 2026-01-07
libsodium

< 1.0.21

CVE-2025-69277
https://00f.net/2025/12/30/libsodium-vulnerability/