-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 26 Feb 2024 23:23:19 +0100 Source: php-phpseclib Architecture: source Version: 2.0.42-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: Debian PHP PEAR Maintainers Changed-By: David Prévot Changes: php-phpseclib (2.0.42-1+deb12u2) bookworm; urgency=medium . * Backport upstream fixes - BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354] - BigInteger: rm visibility modifiers from static variables - ASN1: limit OID length [CVE-2024-27355] - Tests: updates for phpseclib 2.0 - BigInteger: phpseclib 2.0 updates - BigInteger: fix getLength() Checksums-Sha1: f7003be880e697a32ec28b5c900e69027c016958 1898 php-phpseclib_2.0.42-1+deb12u2.dsc f02382a1db5a580ca7f844cea8dd908c68073a11 164780 php-phpseclib_2.0.42-1+deb12u2.debian.tar.xz cb28773292f7c3b8eab982812f1dba9618c94b3f 7699 php-phpseclib_2.0.42-1+deb12u2_amd64.buildinfo Checksums-Sha256: 19295d80923f8c2ca1a3f466a69e24f072e4f44fd1c82e6828c262b88bda08e2 1898 php-phpseclib_2.0.42-1+deb12u2.dsc df064fe321364c50f1be46d943f95b06091f5271389ecea8b95cc8cfd00beef8 164780 php-phpseclib_2.0.42-1+deb12u2.debian.tar.xz f836b684b081b3824f29f0781bc8302bd504b7718f9119aaa4e1d2eb7961477c 7699 php-phpseclib_2.0.42-1+deb12u2_amd64.buildinfo Files: 429894fae3366b4e842089c097a8cbc8 1898 php optional php-phpseclib_2.0.42-1+deb12u2.dsc 33c6726aea645c27c430bf5017c6c504 164780 php optional php-phpseclib_2.0.42-1+deb12u2.debian.tar.xz f52fd0d3267dff6155b1a364b3da50b6 7699 php optional php-phpseclib_2.0.42-1+deb12u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmXi/NkSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08w94H+gIVvXYjtTJZg/EsXV28iAqxiHzh9TIY PmuOEe138RB/N5is9v7HiEMnok3WJ5qYCDvW8Del87dJ1d2ZcOk+nYnAzz3s4TER w7ylrY5u1PXNP4LzpaAskCeYFQEJo1RLsWOYBpUHEd5Nx2T2R1K6HVfsunhrzbYt Iyz9MjIuN4zBN1se/vh+MXyfSPx4+4T1gwITtMhjo3Gfqi4dFsCeyU8L/9vlM+Ti O604xi5epZYU4zYdyJGKtMEf5lccXU5Gh3MTVIUXzw6Cyfg5IThbJuLAMp6o4Vz4 J9yfvTraR83Bz2HrrKJB2gRyVM0aWXmyuy83bgkNpCCR1MQw3se03/c= =QBkd -----END PGP SIGNATURE-----