-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Nov 2026 07:16:26 +0100 Source: php-phpseclib4 Architecture: source Version: 4.0.3-1 Distribution: unstable Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Prévot <taffit@debian.org> Changes: php-phpseclib4 (4.0.3-1) unstable; urgency=medium . [ terrafrost ] * CHANGELOG: add CVE * Crypt: limit how large iteration counts can be (GHSA-w3p9-g4p2-h3rr) . [ Jack Worman ] * Limit-URL-fetch-time-and-size * Keep-URL-fetch-settings-for-intermediates * Send-the-port-in-the-Host-header * Cap-socket-waits-at-an-hour . [ David Prévot ] * Set upstream metadata fields: Security-Contact Checksums-Sha1: f1f91bb5cada99ff48eb797c2231b359b5f94ef9 1823 php-phpseclib4_4.0.3-1.dsc 2f85e426abf5ee30ccc1e1a36cdec54b8fbf518a 684836 php-phpseclib4_4.0.3.orig.tar.xz 761b20eefdeeb3f4f2ed366518d77609b324f5b7 15632 php-phpseclib4_4.0.3-1.debian.tar.xz 20033db14a2e34ce3ecd1d05a200917d672f3304 7338 php-phpseclib4_4.0.3-1_amd64.buildinfo Checksums-Sha256: 90f8676668a3a1d2c8bec5bf338b240379182a240071b4a4e1af387873dd5a52 1823 php-phpseclib4_4.0.3-1.dsc 137f1b3dad817189cee4cdbc6c89bcd117322d61d2086b57da495b70694cbd91 684836 php-phpseclib4_4.0.3.orig.tar.xz 67dd8929281d081acc5a059b69afcd360da5fcf52c03fc96b1a9eab5edf3a8ab 15632 php-phpseclib4_4.0.3-1.debian.tar.xz 4abfa395c468d0e773b5579e73ed92a7998310863a0b2663902b79f49bbc9354 7338 php-phpseclib4_4.0.3-1_amd64.buildinfo Files: e5b0c2a9ce76f575fb425e067b21dc9a 1823 php optional php-phpseclib4_4.0.3-1.dsc e75743953f74a9a68a65875a155a75b7 684836 php optional php-phpseclib4_4.0.3.orig.tar.xz 6f76dac301ede984ee43ecba04a2eea3 15632 php optional php-phpseclib4_4.0.3-1.debian.tar.xz 4e2e30c7333c605b9f7c5b8472cdcb41 7338 php optional php-phpseclib4_4.0.3-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmrpiAUSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r0886QH/jt0F9szzfpIyEj80lySQ1Filw/0wQJm b1HLtCiA5tRarz2fG79LuvT2cYVdULk5xFU1lcduVMUHIuq3BkmTQ8Zvyp0T+8Ya 9hnzvL0fAeqZorSstfzqklXZ7iCsisk3ZuNXi25HclSxh3HM3cWcgWAR3heOGJMU 0w9x+w+xVpLggiR9axiD3UWKOx/B3BsXASMJ3rInDM0kfCHGuBKegZDtyurb3ZPY vAGouYVGVrwVejVacjd6vYnVq6MqfvI6TWpx42n7mztPGYfpzmYDX+rqKiqO8ViP dTMI8k4wP3gYl1HU90+Nb4M92jE6jmbfECAffF1WoNuZcbUEkk0sjUs= =+BNt -----END PGP SIGNATURE-----