CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

security/libsodium1.0.22

Library to build higher-level cryptographic tools

Maintainer
vsevolod@FreeBSD.org
Packages
libsodium 1.0.22
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/jedisct1/libsodium/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

VuXML entries whose affected range this version has left.

Commits (43)

Daniel Engberg (diizzy) · 1.0.22
security/libsodium: Update to 1.0.22

* PORTVERSION --> DISTVERSION
* Add GitHub as primary MASTER_SITES and upstream's download site
  as fallback
* Add OPTIMIZED_CFLAGS option (default on)

Changelog:
https://github.com/jedisct1/libsodium/releases/tag/1.0.22-RELEASE

Reference:
https://github.com/jedisct1/libsodium/blob/master/configure.ac#L219

PR:		294415
Approved by:	maintainer timeout, 1+ month
9fd3adb3d3
Vsevolod Stakhov (vsevolod) · 1.0.21
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Nuno Teixeira (eduardo) · 1.0.19
security/libsodium: Fix aarch64 build

Apply upstream patch to fix build on aarch64

PR:		278259
Reported by:	Thierry Dussuet <thierry.dussuet@protonmail.com>
Approved by:	portmgr (blanket)
3d1bb5a67c
Vsevolod Stakhov (vsevolod) · 1.0.19
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Koichiro Iwao (meta) · 1.0.18
security/libsodium: Revert "security/libsodium: Update to 1.0.19"

This reverts commit 0ff061cd7a64813e1088f962c3b8521823f72bb1.

Revert update until creating consumers list to bump. There are at least
72 explicit consumers and some more implicit consumers. Hold on to old
version until creating complete list of consumers.

Approved by:	blanket (runtime fixes)
ad01e562ad
Vsevolod Stakhov (vsevolod) · 1.0.19
security/libsodium: Update to 1.0.19
0ff061cd7a
Stefan Eßer (se) · 1.0.18
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.0.18
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mathieu Arnold (mat) · 1.0.18
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.0.18
Remove # $FreeBSD$ from Makefiles.
305f148f48
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.18
Add LICENSE_FILE

- Pet portlint

PR:		238966
Submitted by:	sunpoet (myself)
Approved by:	maintainer (timeout, 6 weeks)
5d65811665
Vsevolod Stakhov (vsevolod) · 1.0.18
- Update to 1.0.18 - Remove random hack as it's meaningful merely on Linux - Skip bump of revision as public API has not changed

PR:		236602
Reported by:	Oleh Hushchenkov <o.hushchenkov@gmail.com>
44c7d12355
Tobias Kortkamp (tobik) · 1.0.16
Do not set TEST_TARGET twice
48213f802a
Vsevolod Stakhov (vsevolod) · 1.0.16
- Update to 1.0.16

PR:		226612
Submitted by:	jlduran at gmail.com
abefdd473f
Mathieu Arnold (mat) · 1.0.15
Switch some MASTER_SITES from http/ftp to https.

Also some cleanup of dead entries.

PR:		226203
Submitted by:	Sam H
Sponsored by:	Absolight
37677d32e3
Vsevolod Stakhov (vsevolod) · 1.0.15
- Update libsodium to 1.0.15 [1] - Bump revisions for all dependent ports

PR:		223147 [1]
Submitted by:	Greg V [1]
f191a0244b
Vsevolod Stakhov (vsevolod) · 1.0.12
- Update to 1.0.12

PR:		217979
Submitted by:	Anton Yuzhaninov <citrin+pr@citrin.ru>
2e6f356fd4
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.11_1
Convert to options target helper
52ce72b6a1
Dmitry Marakasov (amdmi3) · 1.0.11_1
- Remove always-true/false conditions after FreeBSD 9, 10.1, 10.2 EOL - Switch to new test framework

Approved by:	portmgr blanket
49bac7443b
Gerald Pfeifer (gerald) · 1.0.11_1
Bump PORTREVISIONS for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.8.5 to GCC 4.9.4 (at least under some circumstances such as versions of FreeBSD or platforms).

In particular that is ports with USE_GCC=yes, USE_GCC=any, or one of
gcc-c++11-lib, openmp, nestedfct, c++11-lib as well as c++14-lang,
c++11-lang, c++0x, c11 requested via USES=compiler.
89f8b05214
Vsevolod Stakhov (vsevolod) · 1.0.11
- Update to 1.0.11

No bump for dependent port is required as this version has no API changes
0493b380f3
John Marino (marino) · 1.0.10
security/libsodium: Upgrade version 1.0.8 => 1.0.10

Also bump all ports that depend on libsodium.

PR:		210999
Submitted by:	manu
Approved by:	vsevolod (maintainer)
2e94d74398
Mathieu Arnold (mat) · 1.0.8
Oh, it had been fixed just before.

Reported by:	antoine
Pointy hat:	mat
Sponsored by:	Absolight
9f42d18cdc
Mathieu Arnold (mat) · 1.0.8
Mark broken on 9.

crypto_generichash/blake2/ref/blake2b-compress-ssse3.c: In function 'blake2b_compress_ssse3':
crypto_generichash/blake2/ref/blake2b-compress-ssse3.c:66: note: use -flax-vector-conversions to permit conversions between vectors with differing element types or numbers of subparts
crypto_generichash/blake2/ref/blake2b-compress-ssse3.c:66: error: incompatible type for argument 1 of '__builtin_ia32_psrlqi128'

Sponsored by:	Absolight
a1a7fbe89c
Vsevolod Stakhov (vsevolod) · 1.0.8
- Fix build on 9.x - Remove invalid mirror
6d2dc4c9ef
Vsevolod Stakhov (vsevolod) · 1.0.8
- Update libsodium to 1.0.8 - Bump revisions of all dependant ports

PR:		206482
Submitted by:	lev, w.schwarzenfeld@aon.at
7349ed49cd
Vsevolod Stakhov (vsevolod) · 1.0.3
- Updated libsodium to 1.0.3 [1] - Bump revision for dependent ports

PR:		200548 [1]
Submitted by:	rsimmons0 at gmail.com [1]
89b79e70ec
Vsevolod Stakhov (vsevolod) · 1.0.2
- Update to 1.0.2 - Resolve undefined reference for pre-10 i386 FreeBSD [1] - Do not touch dependant ports as SONAME is unchanged

PR:		193281 [1]
Submitted by:	Andriy Voskoboinyk <s3erios at gmail.com> [1]
d8b300b13c
Vsevolod Stakhov (vsevolod) · 1.0.1
- Update libsodium to 1.0.1 - Bump revison for dependent ports
bba47df606
Vsevolod Stakhov (vsevolod) · 1.0.0
- Update to 1.0.0

Reported by:	urras <urras at tox.im> via private email
5e756f0000
Vsevolod Stakhov (vsevolod) · 0.7.1
- Upgrade to 0.7.1.

No incompatible API changes were introduced, so dependant ports revision bump is
not required.

PR:		193790
Submitted by:	thierry
b5e0e00240
Vsevolod Stakhov (vsevolod) · 0.7.0_1
- Fix plist issues - Bump revision
0c3755e2d3
Vsevolod Stakhov (vsevolod) · 0.7.0
- Update libsodium to 0.7.0 - Take maintainership - Update revisions of dependent ports
87334a65e4
Baptiste Daroussin (bapt) · 0.4.5_1
Reset maintainership, the maintainer has no time for it

Submitted by:	former maintainer
32810028f2
Tijl Coosemans (tijl) · 0.4.5_1
- Convert security/libsodium to USES=libtool and bump dependent ports - Run "make check" from regression-test target - dns/curvedns: white space fixes
f9f95f0c52
Danilo Egea Gondolfo (danilo) · 0.4.5
- Update from 0.4.3 to 0.4.5

PR:		ports/183243
Submitted by:	csosstudy <csosstudy@gmail.com> (maintainer)
cc067c70f8
Danilo Egea Gondolfo (danilo) · 0.4.3
- Update from 0.4.2 to 0.4.3 - Add USES=pkgconfig - Add stage support

PR:		ports/182591
Submitted by:	csosstudy <csosstudy@gmail.com> (maintainer)
Approved by:	wg (mentor)
262fd5ea9d
Baptiste Daroussin (bapt) · 0.4.2
Add NO_STAGE all over the place in preparation for the staging support (cat: security)
a65ed2e51b
Guido Falsi (madpilot) · 0.4.2
Update to 0.4.2

PR:		ports/180450
Submitted by: 	csosstudy <csosstudy@gmail.com> (maintainer)
1429a8c4ba
William Grzybowski (wg) · 0.4.1
- Do not install COPYING, LICENSE is already defined [1] - While I'm here rephrase COMMENT [2]

Submitted by:	danfe [1], culot [2] (via email)
Approved by:	culot (mentor)
9517c37109
William Grzybowski (wg) · 0.4.1
- Update to 0.4.1

Changes: https://github.com/jedisct1/libsodium/blob/8cb86026/NEWS

PR:		ports/178259
Submitted by:	csosstudy <csosstudy@gmail.com> (maintainer)
Approved by:	culot (mentor)
6d6f5a815c
Guido Falsi (madpilot) · 0.4
- Update to 0.4 - Add PORTDOCS and respect DOCS option

PR:		ports/178173
Submitted by:	csosstudy <csosstudy@gmail.com> (maintainer)
5d41ea7c30
Martin Wilke (miwi) · 0.3
libsodium is a library for network communication, encryption, decryption, signatures, etc.

libsodium is a portable, cross-compilable, installable,
packageable, API-compatible version of NaCl(security/nacl).
NaCl's goal is to provide all of the core operations needed
to build higher-level cryptographic tools.

WWW: https://github.com/jedisct1/libsodium

Submitted by:	"csosstudy E." <csosstudy@gmail.com>
PR:		ports/176493
c0f2db78ab