Accepted php-phpseclib4 4.0.2-1 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Oct 2026 10:59:19 +0200
Source: php-phpseclib4
Architecture: source
Version: 4.0.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
 php-phpseclib4 (4.0.2-1) unstable; urgency=medium
 .
   [ terrafrost ]
   * CHANGELOG: add CVE
   * SSH2/SFTP: tweaks to unexpected ssh/sftp packet exceptions
   * new private keys were being encryptd with the empty string
   * CMS/SignedData: make validateSignature() return f if no sigs exist
   * CHANGELOG: add 4.0.2 release
 .
   [ Rant ]
   * PFX: accept sha512 in setHashAlgorithm
 .
   [ Orçun Candan ]
   * CMS/SignedData: don't require issuerSerial in ESSCertID(v2)
 .
   [ David Prévot ]
   * Documet CVE in previous changelog entries
Checksums-Sha1:
 5a68e2eef79f877ed9565bd0f1abb3d5905d486d 1823 php-phpseclib4_4.0.2-1.dsc
 68f1090ea4db90676f47850ab3f39cb508a56be8 675160 php-phpseclib4_4.0.2.orig.tar.xz
 a61405b5c21d35684648ce81f323b1e1bb274308 15472 php-phpseclib4_4.0.2-1.debian.tar.xz
 669669de2f34de74251f942c8f0a53ae47b12119 7215 php-phpseclib4_4.0.2-1_amd64.buildinfo
Checksums-Sha256:
 5fa134a8d659d3ec29027e4edbe3c315ce4d32af7dedff5bbc1dea7f07d39f84 1823 php-phpseclib4_4.0.2-1.dsc
 79bdbd744f10e8a46b33ce431476e47b3ddbef9f9cdaaf349d81eba022d3dbcd 675160 php-phpseclib4_4.0.2.orig.tar.xz
 0bda794a7afb25390d184b084b4acce3da00c1ae34be2334857ca2994368d2c9 15472 php-phpseclib4_4.0.2-1.debian.tar.xz
 61b442a790279c0e1fc16cae591a7c26e38c4d29fedcea661bdd5c471611a9da 7215 php-phpseclib4_4.0.2-1_amd64.buildinfo
Files:
 bf3bcd30ca42305cd3da3d7b04faaa36 1823 php optional php-phpseclib4_4.0.2-1.dsc
 6255317922fe593630b03123a8f368ee 675160 php optional php-phpseclib4_4.0.2.orig.tar.xz
 d73c65360dd832c791dac7b1cca1fa3a 15472 php optional php-phpseclib4_4.0.2-1.debian.tar.xz
 2ac57ace3374b0bdadafd59be712c7c6 7215 php optional php-phpseclib4_4.0.2-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmrLU3USHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08ck4H/ioUbWQZwZHvpbr5lwB9vgeFNRx5nSMF
WbNVW6zHnFRmf5T0yhahr4DthCzlYUcQv5F5df0eY2PCOYcGcTSYgPiU/H1HQW5S
0pFWaBuYlx8C6Nf/YjKa94DuzgNUWPtLfRMRKerMbz9HhNrRcr2yvIDJlfgUJxla
2GMXhJ10COXK1bfEybFNWBwZFFJ0bxo0iMLhBJ1D72vx5QKWHa22sYziENKHlZs6
5gOO/VtxrTiq2yccLRfll2w+oPouy6rmYpNhj/wMs9X8xWHFgBh7YH5SUtFNT+Ny
jbvLSzsGee51jyXX5D712F5N9SBOo+/l+4cBoTmykbCszB6+dVUW+sY=
=LfYL
-----END PGP SIGNATURE-----