-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 30 Mar 2026 02:45:23 +0530 Source: php-phpseclib Built-For-Profiles: noudeb Architecture: source Version: 2.0.30-2+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Closes: 1131483 Changes: php-phpseclib (2.0.30-2+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * Add patch to fix for weird characters in subjaltname. (Fixes: CVE-2023-52892) * Add patch to make unpadding constant time. (Fixes: CVE-2026-32935) (Closes: #1131483) * Add patch to use constant time HMAC comparison in SSH2. (Fixes: CVE-2026-40194) * Add patch to reduce the length of supported OIDs in ASN1. (Fixes: CVE-2026-44167) * Add patch to add setURLFetchCallback() to mitigate AIA SSRF in X509. (Fixes: CVE-2026-55599) Checksums-Sha1: 8b743f323ae3d1b12108c5875ef9ce235d61ba9f 2192 php-phpseclib_2.0.30-2+deb11u3.dsc 6a7c5941260f578fc978d366240d967d44253d87 336038 php-phpseclib_2.0.30.orig.tar.gz c9d10f6045ee41b3b64da52f35fa8413643ee467 176564 php-phpseclib_2.0.30-2+deb11u3.debian.tar.xz 5ea134b21bec6da8eb010f06d53835df9fbc0043 6852 php-phpseclib_2.0.30-2+deb11u3_source.buildinfo Checksums-Sha256: 0fbb5d116db33a73e53f0998a504a691990562c1fdbf8d15d0a1e9fc2584db4f 2192 php-phpseclib_2.0.30-2+deb11u3.dsc 7c9f51e9321d81c254759ecf2a04c4a90be0470ecd8c547a0a0f073e57b0efb7 336038 php-phpseclib_2.0.30.orig.tar.gz 024afa256b961e838fdf636988413b8abbee0f6aa95f17d3ed030dabc87ad822 176564 php-phpseclib_2.0.30-2+deb11u3.debian.tar.xz d442a98acea3a494eaf7039ec36138d53fd34c6864a87ea2dbfa2947ab6c6a55 6852 php-phpseclib_2.0.30-2+deb11u3_source.buildinfo Files: 06612cf929d5124492f2b424f09761e2 2192 php optional php-phpseclib_2.0.30-2+deb11u3.dsc 122aadbb4c0e6754dd0d3c994406444c 336038 php optional php-phpseclib_2.0.30.orig.tar.gz e066f170fbe262e8524051866c3d011d 176564 php optional php-phpseclib_2.0.30-2+deb11u3.debian.tar.xz a2221e3f3505fac22e7a4176df865c45 6852 php optional php-phpseclib_2.0.30-2+deb11u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmpI6i4THHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlr6TD/9qxffGPNCDUwgO++09EdUcP3Z8C84I DMJFnGi027rjlmGzrfZ0wkKzv7aRfOtQHz0pb1TPr1+sKRkA/X8r0zvVJdlSTt8e OUM61V2ZLsZRyhr8GF9tJx9DaWf8uMa1ahxLDTQ3SoWuYmrU3116VQb9dpfB6/kK nhms3spA5xoGAVMEi6FOX4RkDHORoTJ9aI+HoXukp0He8a8PpqxExQu7SE9H1k9R 5o0Dv1XB9iH8vYfLKifQfL/mbAMVxXaoMecX1eyTAlTebBccwvODBphAKcg8B3ps aOShcGoddCWWIFm2w4t/3R7KI+jNY7ZZAWDAZCdg1JeYt2waRT9s1mwnRLKbLw7m DU1EjrjiV1zcBOlzYYtYEPq/NUknjfKtxUsQFSDrDDB6lqWxrBr98iLWfYZauwpO KiqMgCRsmBHfDiS955gKvJfv4HdGmxdaRfRMBpeAhnxLvQ0UQBtTYih4t+IoA52E wC3gLu7dWAMm14r4Ec1ExALCuoBe6TTtGREHRKKunm5FZMPBsfIy8/n8DxOE9KgG AW2rC4NGFFmpXDEmAG7yS3LPJk9Z2bj9BJ8ck6J/Vug+8ckTdwdC3n/2wyezVamk exgs5HeRpLIFjxJKRkefL+unGISgtby4eTY/l1Q4U9vxK/mymAeU5OVxNV40nAf8 qFtpCUWmjSXKPw== =NzpJ -----END PGP SIGNATURE-----
