-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 30 Mar 2026 01:38:46 +0530 Source: phpseclib Built-For-Profiles: noudeb Architecture: source Version: 1.0.19-3+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Closes: 1131485 Changes: phpseclib (1.0.19-3+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * Add patch to fix for weird characters in subjaltname. (Fixes: CVE-2023-52892) * Add patch to make unpadding constant time. (Fixes: CVE-2026-32935) (Closes: #1131485) Checksums-Sha1: d431574c7c4d7ccf79eece1e33e815d5076e189e 2162 phpseclib_1.0.19-3+deb11u3.dsc 8d782b0d6bce2a54a419b77994191ac78a1cc212 340356 phpseclib_1.0.19.orig.tar.gz 08f2e604d1647c07f375b171ae8de071417a9d4f 174176 phpseclib_1.0.19-3+deb11u3.debian.tar.xz f7636f5240a8cdda45b8d16a21ec7575e7edfb56 8226 phpseclib_1.0.19-3+deb11u3_source.buildinfo Checksums-Sha256: 07f2dccdecf64b41a6fed42c66b3471c3c1c3d3c17a3bef14741899a03378c8e 2162 phpseclib_1.0.19-3+deb11u3.dsc 9f4920b632e87af5a312ed22ec528813c649ee47bae507c1562d1382fa19f29e 340356 phpseclib_1.0.19.orig.tar.gz ae97efcf9ee1c72a4db1c8bd8b322189419f6076e37174e1b91907a66e67ab83 174176 phpseclib_1.0.19-3+deb11u3.debian.tar.xz cbff07eb3ff4604244a459d0eb6a5dfdc20eb34042a5e35132210ae439f63f90 8226 phpseclib_1.0.19-3+deb11u3_source.buildinfo Files: 4e19f6335cc36524f03d3345c98bbda5 2162 php optional phpseclib_1.0.19-3+deb11u3.dsc 5a2b2fecf8c216d9b85133cbb5796588 340356 php optional phpseclib_1.0.19.orig.tar.gz 05cc85d7fb0e7fa2c76756aa3d2e5244 174176 php optional phpseclib_1.0.19-3+deb11u3.debian.tar.xz 1d9785ed5ef1b64715dfbb36f502d286 8226 php optional phpseclib_1.0.19-3+deb11u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmnJjBETHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlu7QEACH3EUjCFmV9+gmItF0nQCIHopCFmL4 az0ULhoEBWJsZvv6WuyeSaBlPjwwELZnD2jjVh0yktXcwDlSw2qA1aW2gGbX6uIJ rB66Y8fHfalNOJrnjIU6cGZCk7uYv8g+h0Xuw+xbu54Wm+ZSSiqVhSZYd5mVSFQw 2/n4J9ci2UD5XplJSbI2EOXB5TxO30oIx83lGlpIWanW9M3egoZPwftRdv9L+Crx OFGw1L4S9sAVTgkDt+NZXtudVR7hFCEKvxNh8jHVr26QwNqgABQmGCdbgNXbgsAc UqkoUdytpE5md/iKml0Rqxt4YTsSIqCpPQE8t8O7n9U4rbOjabFeoX2N6ettOb8+ kGxXcOuky5B5omwrupmQrwOWRThcoszeVUxJ+mwQtrWEO9o0y7JrEbjyCT0s9LWK 60i2OF2w+I2TNIonJ+lJlH/qY11LdkIpF6gIoURiw+c/wPeVNFnmKMh4WUunY604 VnAXtUmjS5rc1P4cyzZCPg6QsBPHtTxw3zE4nHFFoTVCxHBjVJ6G+zrkMishaUkg VdBf5989E/1sVm70ZD4CqVcIxZ2hcC9wFKUebTH6Id2yinjHVWbQ6c+/Si7csoYl qxT7p4UNyzoRJrKumTotkboD68fSFGKHydwlc55/JZ64NLorRzGn1VtTpdJppwgG 5uTCFyEtjBU66Q== =sd8n -----END PGP SIGNATURE-----