-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 11 Oct 2026 10:59:19 +0200 Source: php-phpseclib4 Architecture: source Version: 4.0.2-1 Distribution: unstable Urgency: medium Maintainer: Debian PHP PEAR Maintainers <[email protected]> Changed-By: David Prévot <[email protected]> Changes: php-phpseclib4 (4.0.2-1) unstable; urgency=medium . [ terrafrost ] * CHANGELOG: add CVE * SSH2/SFTP: tweaks to unexpected ssh/sftp packet exceptions * new private keys were being encryptd with the empty string * CMS/SignedData: make validateSignature() return f if no sigs exist * CHANGELOG: add 4.0.2 release . [ Rant ] * PFX: accept sha512 in setHashAlgorithm . [ Orçun Candan ] * CMS/SignedData: don't require issuerSerial in ESSCertID(v2) . [ David Prévot ] * Documet CVE in previous changelog entries Checksums-Sha1: 5a68e2eef79f877ed9565bd0f1abb3d5905d486d 1823 php-phpseclib4_4.0.2-1.dsc 68f1090ea4db90676f47850ab3f39cb508a56be8 675160 php-phpseclib4_4.0.2.orig.tar.xz a61405b5c21d35684648ce81f323b1e1bb274308 15472 php-phpseclib4_4.0.2-1.debian.tar.xz 669669de2f34de74251f942c8f0a53ae47b12119 7215 php-phpseclib4_4.0.2-1_amd64.buildinfo Checksums-Sha256: 5fa134a8d659d3ec29027e4edbe3c315ce4d32af7dedff5bbc1dea7f07d39f84 1823 php-phpseclib4_4.0.2-1.dsc 79bdbd744f10e8a46b33ce431476e47b3ddbef9f9cdaaf349d81eba022d3dbcd 675160 php-phpseclib4_4.0.2.orig.tar.xz 0bda794a7afb25390d184b084b4acce3da00c1ae34be2334857ca2994368d2c9 15472 php-phpseclib4_4.0.2-1.debian.tar.xz 61b442a790279c0e1fc16cae591a7c26e38c4d29fedcea661bdd5c471611a9da 7215 php-phpseclib4_4.0.2-1_amd64.buildinfo Files: bf3bcd30ca42305cd3da3d7b04faaa36 1823 php optional php-phpseclib4_4.0.2-1.dsc 6255317922fe593630b03123a8f368ee 675160 php optional php-phpseclib4_4.0.2.orig.tar.xz d73c65360dd832c791dac7b1cca1fa3a 15472 php optional php-phpseclib4_4.0.2-1.debian.tar.xz 2ac57ace3374b0bdadafd59be712c7c6 7215 php optional php-phpseclib4_4.0.2-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmrLU3USHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08ck4H/ioUbWQZwZHvpbr5lwB9vgeFNRx5nSMF WbNVW6zHnFRmf5T0yhahr4DthCzlYUcQv5F5df0eY2PCOYcGcTSYgPiU/H1HQW5S 0pFWaBuYlx8C6Nf/YjKa94DuzgNUWPtLfRMRKerMbz9HhNrRcr2yvIDJlfgUJxla 2GMXhJ10COXK1bfEybFNWBwZFFJ0bxo0iMLhBJ1D72vx5QKWHa22sYziENKHlZs6 5gOO/VtxrTiq2yccLRfll2w+oPouy6rmYpNhj/wMs9X8xWHFgBh7YH5SUtFNT+Ny jbvLSzsGee51jyXX5D712F5N9SBOo+/l+4cBoTmykbCszB6+dVUW+sY= =LfYL -----END PGP SIGNATURE-----
pgp2faTTQQxYO.pgp
Description: PGP signature
