Post #2926113
2025-12-30 16:21 UTC
# sodium_compat security release
* https://github.com/paragonie/sodium_compat/releases/tag/v2.5.0
* https://github.com/paragonie/sodium_compat/releases/tag/v1.24.0
Further information: https://00f.net/2025/12/30/libsodium-vulnerability/
Replies (1)
-
@paragon@phpc.social 2025-12-30 18:40
WordPress ticket: https://core.trac.wordpress.org/ticket/64462#ticket Pull Request to prevent Composer from installing affected versions if Roave/SecurityAdvisories is used: https://github.com/FriendsOfPHP/security-advisories/pull/756