-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Mar 2026 08:34:55 +0100 Source: php-phpseclib3 Architecture: source Version: 3.0.19-1+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Prévot <taffit@debian.org> Closes: 1131482 Changes: php-phpseclib3 (3.0.19-1+deb12u4) bookworm-security; urgency=medium . * make unpadding constant time [CVE-2026-32935] (Closes: #1131482) * X509: fix for weird characters in subjaltname [CVE-2023-52892] Checksums-Sha1: 1f5f4b0b5d237038b10e1f1390b82ad1e03330c5 1907 php-phpseclib3_3.0.19-1+deb12u4.dsc 60a4469a48463c6710653d49c3f261d98c63dd8b 172208 php-phpseclib3_3.0.19-1+deb12u4.debian.tar.xz f421d0015b4719a4fb78f466ce4b04d291d2e0ab 8155 php-phpseclib3_3.0.19-1+deb12u4_amd64.buildinfo Checksums-Sha256: 557371ff0ebf0e66401a8e00be6619de9e1bd9c9796c1718aba6473af68d208b 1907 php-phpseclib3_3.0.19-1+deb12u4.dsc 3695362e29c736ce75f846ce4d5c10a2c97309ba7dd5c0ab7ad9220b44af5381 172208 php-phpseclib3_3.0.19-1+deb12u4.debian.tar.xz b12bce2cdde2583d8d2f810a08be377a0cfcac632bfeaae56726ff01031584ec 8155 php-phpseclib3_3.0.19-1+deb12u4_amd64.buildinfo Files: e22841058134740e8335d44c81cf9e51 1907 php optional php-phpseclib3_3.0.19-1+deb12u4.dsc 33f86967e36f1eba3ab1240a951aabd4 172208 php optional php-phpseclib3_3.0.19-1+deb12u4.debian.tar.xz 88ba21c041c20ddcff7ff6c811b8393d 8155 php optional php-phpseclib3_3.0.19-1+deb12u4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnGIPQSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08QRYH/An5csytlq47VAHsbiPbgfOE5a/mSWVt BKxvOZZPfWDHRn6QWUIX7iv1f3aMo9GQb6s4z7UgNnzfQzRlnvvmjNKtolif3nXG MSTdke6yFyO7pOkQw2tXqUEnqJunansxGawYFee4jjBZxSL4RnrqLct7XeY3HZAY XVI+caxvQ41IPdjniIt4hU5UvoarZlEWvQwVodEtkTt5+vgVCBbsRAt3FyEAYmk5 5IoqfWZ7+i1J8BSiaPpdJJdUThuyy+eHOmvScbjAg61nt3HiNv+CNun5dU4cwma2 f/FQuokJEc7e/+PAUKLOpnxDkibIK4mAgteCO01cTzZCF3azcUDtyMQ= =JEoW -----END PGP SIGNATURE-----