-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 26 Feb 2024 23:23:19 +0100 Source: php-phpseclib Binary: php-phpseclib Architecture: all Version: 2.0.42-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: David Prévot Description: php-phpseclib - implementations of an arbitrary-precision integer arithmetic libr Changes: php-phpseclib (2.0.42-1+deb12u2) bookworm; urgency=medium . * Backport upstream fixes - BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354] - BigInteger: rm visibility modifiers from static variables - ASN1: limit OID length [CVE-2024-27355] - Tests: updates for phpseclib 2.0 - BigInteger: phpseclib 2.0 updates - BigInteger: fix getLength() Checksums-Sha1: 5a18ed9cb0cc2d9f4686345d0c7e872a4f1b9764 7724 php-phpseclib_2.0.42-1+deb12u2_all-buildd.buildinfo 93b4f2e4678686048e1e8c7a87b2affb5a032f9e 203512 php-phpseclib_2.0.42-1+deb12u2_all.deb Checksums-Sha256: b8fed86b5ef95ac54901dc47378df57e5c6c2bb4c485b3ef5f44750755c07905 7724 php-phpseclib_2.0.42-1+deb12u2_all-buildd.buildinfo 8a768fec7e1597e155a1d75c4286559831a57ce61aee6980853dec62db5948f6 203512 php-phpseclib_2.0.42-1+deb12u2_all.deb Files: 8a524c30eae98fffa5d1e832778c0f56 7724 php optional php-phpseclib_2.0.42-1+deb12u2_all-buildd.buildinfo ccd541e37a9d45192b23fe246fec1ab7 203512 php optional php-phpseclib_2.0.42-1+deb12u2_all.deb -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEEOtJZa9Q/HRv7PgxxkF7E12VCox0FAmYFvzMACgkQkF7E12VC ox0Cpw/43MF5e9LL8zdNQBcnncUt70ZXnDOEffAR44T4rG983AjzY9KnHTLaxxFT JTlOTuIhdHiPZw5VYC5OfL1fJFLbNfJVEPXEYh0U4mWcZDbZ5l/3ax6YX9FL4XN1 NIp5UXJ+vtCP3ohg4j9R3blGnYWivjJ3RivxkKXkvWdi6YUI2bDqYtgRPW9hdv22 fVDIPXlSZxccCxj3/Vx1lmd8KiZpBhURavq33erreEws/aQqH0AQ5S5QxTVCzYWG 5wYzY9IzQh8gTHskJXKT36JLP1DygEyo2brYIxBYOEYaelQ0YYBaR0PSBNGJ/jyJ qYh71SYMzJLUftEfr2QU6Y+8e+kGlQiMxl4BqbHyDpuTx82ho8duZGtPzu9i4pbH nuiOItyWSQ/4yxyK2+vh9exLQLihmSgBhXs7ZLfgJqEUFkH4r8w0bB1Ur/I0wxZ0 CFLY6LGJAvABV92fQzVeALFYa04PBZsvPiIwShlP9oTvdFnoqvyInNSWI16BTOoH 0TkZ0/ZIbpZ5G9P0/QFabpmhjIFkkxPYBlkC2dQdkcp53ta51DhsnYV5ch77ptFS Gch4MlLvazBVWO4b9IyxkJW+/ZfRY7IqfQhUbUrjauM6lr9Hp9lZ9SbZk7HzkDfh ZQczT7Qpktiv8MGEebjyiudkCEOwMaFxCfpuIZohoYyFv3y/Vw== =RJ8w -----END PGP SIGNATURE-----