-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 26 Feb 2024 22:58:32 +0100 Source: phpseclib Architecture: source Version: 1.0.20-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: Debian PHP PEAR Maintainers Changed-By: David Prévot Changes: phpseclib (1.0.20-1+deb12u2) bookworm; urgency=medium . * Backport upstream fixes - BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354] - ASN1: limit OID length [CVE-2024-27355] - BigInteger: fix getLength() * Force system dependencies loading Checksums-Sha1: c8a28c67b61c4ecadef910f0c242a0823921aa5d 1837 phpseclib_1.0.20-1+deb12u2.dsc 0d00b99d0ce537c2a017dc0311bee971077f685b 162064 phpseclib_1.0.20-1+deb12u2.debian.tar.xz d8dcb08ff492db3547e084517593c241ea001bac 7667 phpseclib_1.0.20-1+deb12u2_amd64.buildinfo Checksums-Sha256: 4f60d6bf2b4a06d545b0615589f12e1379d48de35f40ed54ee2a6d28d7b6fab2 1837 phpseclib_1.0.20-1+deb12u2.dsc 201bd68356c2c851cdc814c3198226bc21320dbac9e8c74c0b2aad96d7be5fbe 162064 phpseclib_1.0.20-1+deb12u2.debian.tar.xz de7ead4d2815333f521db817d141980349e56edaa4e9e08e98f74bf036a8dedd 7667 phpseclib_1.0.20-1+deb12u2_amd64.buildinfo Files: cccc3966f45e5d5a82d412e5ee69f44d 1837 php optional phpseclib_1.0.20-1+deb12u2.dsc 8e689dee9ff854cabdbf78ff747589bb 162064 php optional phpseclib_1.0.20-1+deb12u2.debian.tar.xz ca08369570008d308cf3b5c47a6ee988 7667 php optional phpseclib_1.0.20-1+deb12u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmXi/TwSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r088goH/RD2F8AZfYuL5ZjQxyCdPsazz08WKTB4 Tm67ZPDU0Ad14mciYu7hJj0uY7dq2Ll8Hr8YfgSi4aav4Y8Dsk9wM136S5BAoJAu cEKi+r9p3O69z9fhcw1IbODht6SaId6yAFGZQbqcCurbeSrPOcJWwDL+h8Cuf2bw Bx6W2qfEueFnsqJRMC2Wv4tBDNg/5bujihFJpIEUDpopdHc6EkdJ3GJHnV/zHv+X DEcZ2NnobEMgQleCHrwtiLyXM35PuxmNsqxnne1x0jLVsol9pp6+Ktu7DlfMjc6F ARfOnlkK6+n4uWuIZcWp0dTWs6NK5zTWB4ZsLbGR+3JZZOcf76EzvBU= =HN+f -----END PGP SIGNATURE-----