[pkg-php-pear] php-phpseclib3_3.0.19-1+deb12u3_source.changes ACCEPTED into proposed-updates

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 27 Feb 2024 21:58:00 +0100
Source: php-phpseclib3
Architecture: source
Version: 3.0.19-1+deb12u3
Distribution: bookworm
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
Changed-By: David Prévot <taffit at debian.org>
Changes:
 php-phpseclib3 (3.0.19-1+deb12u3) bookworm; urgency=medium
 .
   * Backport upstream fixes
     - BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354]
     - Tests: add unit test for EC pub key with excessively large integer
     - ASN1: limit OID length [CVE-2024-27355]
     - Tests: updates for phpseclib 2.0
     - Tests: phpseclib 3.0 updates
     - BigInteger: optimize getLength()
   * Force system dependencies loading
Checksums-Sha1:
 879e43621d504c90f1bbed28afb8a786b072d480 1907 php-phpseclib3_3.0.19-1+deb12u3.dsc
 c444faa6fa4e8b4a025939a80e75a0d4ec81e118 168024 php-phpseclib3_3.0.19-1+deb12u3.debian.tar.xz
 519a7b6b8953f56afc24e004721f032daef07f5a 7743 php-phpseclib3_3.0.19-1+deb12u3_amd64.buildinfo
Checksums-Sha256:
 5741169dc78982945f5bd0b8aa9cc24f95dd1cb6479f0bc9e2115fdea368bcae 1907 php-phpseclib3_3.0.19-1+deb12u3.dsc
 81772a401893a0c579180776e761fc3d27e53bc6906bd982da3cb2dad9a8c698 168024 php-phpseclib3_3.0.19-1+deb12u3.debian.tar.xz
 14a59765ddb45cc32ba8a3031a28a2dd9b7a3b605783d02a159838da9836e117 7743 php-phpseclib3_3.0.19-1+deb12u3_amd64.buildinfo
Files:
 b92a3e8c5ff1d5b7d7f7ab783524fe3c 1907 php optional php-phpseclib3_3.0.19-1+deb12u3.dsc
 ddedcf046788bf616b59379878668d4e 168024 php optional php-phpseclib3_3.0.19-1+deb12u3.debian.tar.xz
 cb35d818c7b9e78b4ab53b0f4198e304 7743 php optional php-phpseclib3_3.0.19-1+deb12u3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmXi/HYSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r081CYIAI5ZXXWOIGu6bNp/1iY6bRXAeBGEfGLI
w4gGJwcMbt/27FtJFTHtyvT3VMpq9lMq/OZlX5KONx0k8nGOqAf1g30v2dk1EP3/
QcKOYv/Ms3k3H6Hh4td9isL/vlp5tK0JxvxVNB6RASvSIJgO62fm4c5prRkPY2GD
06K3sBvvS74ihmeKG4Oe8zVGu0d73qXwYgItrsf9wF7gOfoOh5l8l2mz0cunb0Y6
OO9ARsaZ5hFJV89UJbUPMXe/C53ybzRMSMs6W9vL6AHuFaGb66S7UGqDdWFnQICU
Q8UICq5SjDe9S5oMHbyXn5tO2f2OTnsq6II+R0ykaEHuI2bwRD5ylBw=
=kEsJ
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-php-pear/attachments/20240328/7e00a32f/attachment.sig>