-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 31 Dec 2023 11:37:21 +0100 Source: phpseclib Architecture: source Version: 1.0.20-1+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Prévot <taffit@debian.org> Changes: phpseclib (1.0.20-1+deb12u1) bookworm-security; urgency=medium . * Track Bookworm * Backport upstream SSH2 changes - if logging in with rsa-sha2-256/512 fails, try ssh-rsa - add support for RFC8308 - implement terrapin attack countermeasures [CVE-2023-48795] Checksums-Sha1: 561598e99c01df6cc33bbc65aba569822c4b6e52 1834 phpseclib_1.0.20-1+deb12u1.dsc dac99a4d0e919cb56f7221677c38cb00ff35f833 262964 phpseclib_1.0.20.orig.tar.xz e1148e1d9d194bf524890dc67f9b50058235d62e 11040 phpseclib_1.0.20-1+deb12u1.debian.tar.xz 9c977591c0ca9e920c23502c44a06dd2f7f757a4 7649 phpseclib_1.0.20-1+deb12u1_amd64.buildinfo Checksums-Sha256: 313c34b4033e7274b5cc82946872eccff8bced59adc43a52cbbd40dec80ed0f2 1834 phpseclib_1.0.20-1+deb12u1.dsc ea254e4337b1a7e256608cd33dc90c26f81aaf7c6612dc17e81cb2c73a3d0d3a 262964 phpseclib_1.0.20.orig.tar.xz 24c146cc05b99672eae0b7865b6913e2cb5ae58ed6f29da464099216e5443cb2 11040 phpseclib_1.0.20-1+deb12u1.debian.tar.xz 8e63be5da6d55258bd80066a18d443b7729996da17a5ffc894f112c6d98a3629 7649 phpseclib_1.0.20-1+deb12u1_amd64.buildinfo Files: 44e8b2b87bfab24c8c50f5664fe12d14 1834 php optional phpseclib_1.0.20-1+deb12u1.dsc 5b06ac32ddd59422e1f000435dbda4fa 262964 php optional phpseclib_1.0.20.orig.tar.xz 4f35126b787a2393c0ee4334cf768fa8 11040 php optional phpseclib_1.0.20-1+deb12u1.debian.tar.xz b8d459e47a1ebfc7325c98b0a22c912a 7649 php optional phpseclib_1.0.20-1+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmWc7lYSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08skgIAKfrIKIgrngcjpDohWJd83C9wRPqb/Ku 7rLO/lTW64br+TvEhcbpOXMeB11yDrpIhNXJOizJxbDI5dqbJi/ev2498foGGbna R2U5z2DD7LiwFFQyFnSs5p+GCc4XqV54dGWmwykhJar1HZ9UbGDwRwLF0yEiRW6I HZD1djai/f8yymzV7fbF6eZ4YPWEDZTT7gZsXFHZXTNyLbQ4KkS5Q9aQaKEx+QE4 ev6Eweyj8ETsVpTQMJVDp4qvsiHBT5rHPxGWpSmXSvDKvIp+JiEiLfY0h/Ud4bKG b57IcZ/cU7LJUtF5jAlHcenZYRUjUoZnHj/S30gNwcNk7eSMYO4mjvY= =mC2g -----END PGP SIGNATURE-----