-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 27 Feb 2024 21:58:00 +0100 Source: php-phpseclib3 Binary: php-phpseclib3 Architecture: all Version: 3.0.19-1+deb12u3 Distribution: bookworm Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: David Prévot Description: php-phpseclib3 - implementations of an arbitrary-precision integer arithmetic libr Changes: php-phpseclib3 (3.0.19-1+deb12u3) bookworm; urgency=medium . * Backport upstream fixes - BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354] - Tests: add unit test for EC pub key with excessively large integer - ASN1: limit OID length [CVE-2024-27355] - Tests: updates for phpseclib 2.0 - Tests: phpseclib 3.0 updates - BigInteger: optimize getLength() * Force system dependencies loading Checksums-Sha1: 58fb1b0e50fe9dd45fb24ada9c01573392be81ea 7765 php-phpseclib3_3.0.19-1+deb12u3_all-buildd.buildinfo 96a334c3f763c1c1e0b38992375f01ee3edee5e1 287320 php-phpseclib3_3.0.19-1+deb12u3_all.deb Checksums-Sha256: 713b01f8255deec0d575b70cc5ba66353ce94d2d6b365cdd36f9178db2afea88 7765 php-phpseclib3_3.0.19-1+deb12u3_all-buildd.buildinfo 747fdaec81a2fe21eb39e5ead1e5e789776c53609e97446984e2d74047745327 287320 php-phpseclib3_3.0.19-1+deb12u3_all.deb Files: 2719bd1471fbc31bb3774b3908fea7cd 7765 php optional php-phpseclib3_3.0.19-1+deb12u3_all-buildd.buildinfo 22ba0bc68ac801d472674416e92ed917 287320 php optional php-phpseclib3_3.0.19-1+deb12u3_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtzb3SVunlrB0F8t8ExOkVqF4GXMFAmYFvbcACgkQExOkVqF4 GXP6FhAAmLQg9InVfCI7gwSBgXQCAdbz48h1u91KJP0/CawtbTcXrTiJKHdbMa1z W5hsmeoiqdZkOTaIXAhUPhwcSqamH1mz4C3x+YOuqDbVhNSneoi9m3tsakHYMi43 MmyStgH7IHqHbwrQwciABJUcYwpk2UEdEx+s7KMWOB3AA69XWlTxsReIe1t/FnU8 zzvMfLWbk+wZZjTjGaLuL6tEyTw0x+ysi2uH2HcM6/CELoFtfn9DGD63OKxj+xCz +gAPIMZ0jNGKquikOzzcjSyMxrboYQ6Rj7/U2ep+v/u17PtyQ1wVDulnaklu/uoI iccbIOhjxL4Vyn+4n9EHWDJD7YfW0bCMQIOGKq6tn3+qdjcwoCR4NuUmbqAWtYZ9 WX4j5Q3PkaT6zJ4ntP6zgPm1mgNN4PN+tz5EQh+CG9MvUUb8QFO8Fh2prFOv/3Pm 0VuF/Ct5+kxuXTQOoGLMeocaPR4FZtxPc5ELtbR4DfWue1xrq2Whzi8CJnq+u0gn WKzPO+CTYLCIf/iPlAOU0szYzOQOLLyjYgMlijAvxzejvOScmx9zwoMMu5j4mXE3 /ezhJDFmFNFRDx4C0FPSWepi/mshpbzMpxHwSFQp4wDEb0cNmgQTDRNMJMaXON12 4wpyMInz9+SChBebLzSqBdv1M8UaujDTytI/XGWp9zzHRpMdY3E= =ZLe2 -----END PGP SIGNATURE-----