-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 18:16:23 +0100
Source: phpseclib
Architecture: source
Version: 1.0.20-1+deb12u3
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Closes: 1131485
Changes:
 phpseclib (1.0.20-1+deb12u3) bookworm-security; urgency=medium
 .
   * make unpadding constant time [CVE-2026-32935] (Closes: #1131485)
   * X509: fix for weird characters in subjaltname [CVE-2023-52892]
Checksums-Sha1:
 972b63e362340edd351cbbb8471c74e6a5aceee8 1837 phpseclib_1.0.20-1+deb12u3.dsc
 0b60dc7a605c60420b2283f1a513cecf58630b8d 166176 phpseclib_1.0.20-1+deb12u3.debian.tar.xz
 fff58c83046f0bc86e6ee937448a7c28052c42eb 8079 phpseclib_1.0.20-1+deb12u3_amd64.buildinfo
Checksums-Sha256:
 0a0b9d0907d6ea2ff98102f4353ddbd05271ff667696d791f86ab25cc86c3a2a 1837 phpseclib_1.0.20-1+deb12u3.dsc
 9aeaa1a1015bf4e205c141ac82a34d09a3ba11d5ffc8c42d32aba09b2af2a4db 166176 phpseclib_1.0.20-1+deb12u3.debian.tar.xz
 a939d19b15f183b7b3ae0642f816e852c6857d19543478a52b7b71eeb6b8a5ac 8079 phpseclib_1.0.20-1+deb12u3_amd64.buildinfo
Files:
 d5fb4da1caa929c46435ef3ad927f30d 1837 php optional phpseclib_1.0.20-1+deb12u3.dsc
 de42f7748802243522e633536141c8d9 166176 php optional phpseclib_1.0.20-1+deb12u3.debian.tar.xz
 876591ffe64a45644ebddee5829ba1fa 8079 php optional phpseclib_1.0.20-1+deb12u3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnGIPESHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r082f0H/jPe//T7Nf3ZgUL2uwwdeo4z/J5prJ3Q
HiJxzuxeF8pGGiDM51oZCDitPik513AptF9vsjbaVtGiPPSmMaKrNcU4u13wlD+p
9SAT8kLoxj7wSW592LU24miQ0m0ouaNw/K6o4J+g5pjzWHGIxKaBUburIMbhZjHT
o080CJQSwANmt5a5D3MusHx1kcDUye1T7SnuQ7xCWw5zZWmFs1YiKiZbQVy440gG
b99HPkJABZJ0DZvVwhW6zptwGCsc3jBaukMn1xGbNlECtQaG5+L8lKj8PMbayPSR
cyeYqQXkqtqo/0S7y1J3Ggbc5+vkMoB4xEktAOp4nj4bMZ+vw65WQZk=
=08jJ
-----END PGP SIGNATURE-----