-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 08:44:18 +0100
Source: php-phpseclib
Architecture: source
Version: 2.0.48-3+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Closes: 1131483
Changes:
 php-phpseclib (2.0.48-3+deb13u1) trixie-security; urgency=medium
 .
   * Track trixie branch
   * make unpadding constant time [CVE-2026-32935] (Closes: #1131483)
Checksums-Sha1:
 2a251b3faa374e3b8c667c891b214ba51b449022 1833 php-phpseclib_2.0.48-3+deb13u1.dsc
 70edbb74b85af5e0054fc511336df0d2bfb5c77c 429764 php-phpseclib_2.0.48.orig.tar.xz
 30765fd69d060e29327edfdbe87d04f826aacd50 17780 php-phpseclib_2.0.48-3+deb13u1.debian.tar.xz
 f975d77ab6fb6d6b9c3ae906cd4ef5e9ff362464 7637 php-phpseclib_2.0.48-3+deb13u1_amd64.buildinfo
Checksums-Sha256:
 1b15f1e1220f0a3a4dd7a05a709bbd41da1dd6ecb3414951dca07608a4aa0cce 1833 php-phpseclib_2.0.48-3+deb13u1.dsc
 75862dab045d8610b396feecf754d286242945abde29f59444ddd80b0f583990 429764 php-phpseclib_2.0.48.orig.tar.xz
 2ce41186e515b930454d1c8b0ad7f09a1d84ddda3875cc1a58a768ad34bc9c0a 17780 php-phpseclib_2.0.48-3+deb13u1.debian.tar.xz
 ef1fe313e9c3f885397406596bf407875bcfa334d5cb8e98ace6e678b8772a4b 7637 php-phpseclib_2.0.48-3+deb13u1_amd64.buildinfo
Files:
 586b4c25e565e8a3ec896c85589c3a5a 1833 php optional php-phpseclib_2.0.48-3+deb13u1.dsc
 e748cdf385929a65307f5990b516f765 429764 php optional php-phpseclib_2.0.48.orig.tar.xz
 1f71f8060f639226b99608fa6caeb641 17780 php optional php-phpseclib_2.0.48-3+deb13u1.debian.tar.xz
 29395e7786d57d73b9df19c275d0817c 7637 php optional php-phpseclib_2.0.48-3+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnGIO8SHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08NEoH/1WPpzpINyh8ZqH7jr56C3msc9dwa6XD
hwOZU+gdrvCqDO0OemrXgTk32fHAm7iFjHz9M8qbwjxFpOu4r3EYG8PBRp7Zyx82
ROpcUdxuvgbF/e3/XcKlCXLjzxLkZGxfHXukpYkrSP2YO51IQLcKIyqX9LAXXJCO
9IBeK1CVfLCebS9elr23PBv4V/ZUg63YPiOCSZG0dczQLh7UXrlYEGbYydjQqbdf
q9IeKM6HeoGUnmqP+5Vng1/04owhxQchnaU388T95E3ajA9JpRaUCgNTemXb/8qW
jYXbZ3cHyEzZnSNVf0Qepp076ZOBdNpb1tpyKxYje5YHitTY6ClJIfo=
=2U7a
-----END PGP SIGNATURE-----