-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 27 Feb 2024 21:58:00 +0100 Source: php-phpseclib3 Architecture: source Version: 3.0.19-1+deb12u3 Distribution: bookworm Urgency: medium Maintainer: Debian PHP PEAR Maintainers Changed-By: David Prévot Changes: php-phpseclib3 (3.0.19-1+deb12u3) bookworm; urgency=medium . * Backport upstream fixes - BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354] - Tests: add unit test for EC pub key with excessively large integer - ASN1: limit OID length [CVE-2024-27355] - Tests: updates for phpseclib 2.0 - Tests: phpseclib 3.0 updates - BigInteger: optimize getLength() * Force system dependencies loading Checksums-Sha1: 879e43621d504c90f1bbed28afb8a786b072d480 1907 php-phpseclib3_3.0.19-1+deb12u3.dsc c444faa6fa4e8b4a025939a80e75a0d4ec81e118 168024 php-phpseclib3_3.0.19-1+deb12u3.debian.tar.xz 519a7b6b8953f56afc24e004721f032daef07f5a 7743 php-phpseclib3_3.0.19-1+deb12u3_amd64.buildinfo Checksums-Sha256: 5741169dc78982945f5bd0b8aa9cc24f95dd1cb6479f0bc9e2115fdea368bcae 1907 php-phpseclib3_3.0.19-1+deb12u3.dsc 81772a401893a0c579180776e761fc3d27e53bc6906bd982da3cb2dad9a8c698 168024 php-phpseclib3_3.0.19-1+deb12u3.debian.tar.xz 14a59765ddb45cc32ba8a3031a28a2dd9b7a3b605783d02a159838da9836e117 7743 php-phpseclib3_3.0.19-1+deb12u3_amd64.buildinfo Files: b92a3e8c5ff1d5b7d7f7ab783524fe3c 1907 php optional php-phpseclib3_3.0.19-1+deb12u3.dsc ddedcf046788bf616b59379878668d4e 168024 php optional php-phpseclib3_3.0.19-1+deb12u3.debian.tar.xz cb35d818c7b9e78b4ab53b0f4198e304 7743 php optional php-phpseclib3_3.0.19-1+deb12u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmXi/HYSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r081CYIAI5ZXXWOIGu6bNp/1iY6bRXAeBGEfGLI w4gGJwcMbt/27FtJFTHtyvT3VMpq9lMq/OZlX5KONx0k8nGOqAf1g30v2dk1EP3/ QcKOYv/Ms3k3H6Hh4td9isL/vlp5tK0JxvxVNB6RASvSIJgO62fm4c5prRkPY2GD 06K3sBvvS74ihmeKG4Oe8zVGu0d73qXwYgItrsf9wF7gOfoOh5l8l2mz0cunb0Y6 OO9ARsaZ5hFJV89UJbUPMXe/C53ybzRMSMs6W9vL6AHuFaGb66S7UGqDdWFnQICU Q8UICq5SjDe9S5oMHbyXn5tO2f2OTnsq6II+R0ykaEHuI2bwRD5ylBw= =kEsJ -----END PGP SIGNATURE-----