php-phpseclib (2.0.55-1) unstable; urgency=medium

  [ terrafrost ]
  * CHANGELOG: add CVE
  * ASN1: speed up OID calculation
  * X509: add setURLFetchCallback() method
  * CHANGELOG: add new release

  [ David Prévot ]
  * Update CVE ID in previous changelog entry

 -- David Prévot <taffit@debian.org>  Tue, 16 Jun 2026 00:13:58 +0200

php-phpseclib (2.0.54-1) unstable; urgency=medium

  [ terrafrost ]
  * ASN1: reduce length of supported OIDs from 4096 bytes to 128 bytes
    [CVE-2026-44167] (GHSA-3qpq-r242-jqj7)
  * CHANGELOG: add new entry

  [ David Prévot ]
  * Document CVE fixed in previous changelog entry

 -- David Prévot <taffit@debian.org>  Tue, 28 Apr 2026 13:25:06 +0200

php-phpseclib (2.0.53-1) unstable; urgency=medium

  [ terrafrost ]
  * SSH2: use constant time string comparison in get_binary_packet()
    [CVE-2026-40194]
  * CHANGELOG: add new release

  [ David Prévot ]
  * Update Standards-Version to 4.7.4

 -- David Prévot <taffit@debian.org>  Sun, 12 Apr 2026 08:54:41 +0200

php-phpseclib (2.0.52-1) unstable; urgency=medium

  [ terrafrost ]
  * fix for PHP 8.5 BC breaking changes on 32-bit machines
  * make unpadding constant time [CVE-2026-32935] (Closes: #1131483)
  * X509: add support for organizationIdentifier

 -- David Prévot <taffit@debian.org>  Sun, 22 Mar 2026 13:06:47 +0100

php-phpseclib (2.0.51-1) unstable; urgency=medium

  [ terrafrost ]
  * RSA: add support for OpenSSH pub keys with multiple spaces / tabs
  * RSA: fix for PHP 8.5 deprecations for RSA / PSS
  * BigInteger: another PHP 8.5 deprecation fix

  [ David Prévot ]
  * Convert d/watch to version 5
  * Update Standards-Version to 4.7.3

 -- David Prévot <taffit@debian.org>  Tue, 27 Jan 2026 20:19:12 +0100

php-phpseclib (2.0.50-1) unstable; urgency=medium

  [ terrafrost ]
  * RSA: xml_parser_free() is deprecated in PHP 8.5
  * SCP: fix some longstanding issues
  * BigInteger: fix for PHP 8.5 deprecations for BCMath / toBytes()
  * CHANGELOG: add new release

  [ David Prévot ]
  * Drop now useless file

 -- David Prévot <taffit@debian.org>  Tue, 16 Dec 2025 08:13:04 +0100

php-phpseclib (2.0.49-1) unstable; urgency=medium

  [ terrafrost ]
  * SSH2: backpack server identification string enhancements from 3.0
  * CHANGELOG: add new release

  [ toml-bipsync ]
  * fix: check return value of realpath in chdir

  [ David Prévot ]
  * Remove Rules-Requires-Root
  * Update Standards-Version to 4.7.2

 -- David Prévot <taffit@debian.org>  Tue, 07 Oct 2025 07:45:27 +0200

php-phpseclib (2.0.48-3) unstable; urgency=medium

  * Modernize PHPUnit syntax

 -- David Prévot <taffit@debian.org>  Mon, 17 Feb 2025 10:46:36 +0100

php-phpseclib (2.0.48-2) unstable; urgency=medium

  * Group nophpunit11 for tests failing with PHPUnit 11

 -- David Prévot <taffit@debian.org>  Sun, 05 Jan 2025 09:47:20 +0100

php-phpseclib (2.0.48-1) unstable; urgency=medium

  [ terrafrost ]
  * SSH2: fix possible infinite loop on packet timeout
  * SSH2: identification strings > 255 bytes didn’t get parsed correctly
  * SSH2: if string is passed to setPreferredAlgorithms treat as array
  * X509: CRL fixes
  * X509: make the attributes section of new CSRs be blank
  * SSH2: make it so phpseclib initiates key re-exchange after 1GB
  * BigInteger: improve detection of newly introduced GMP bug
  * SSH2: ignore kex-strict-s-v00@openssh.com in key re-exchanges
  * CHANGELOG: add 2.0.48 release

  [ Jakub Trmota ]
  * Agent: reset supported_private_key_algorithms for every key

  [ Tingsong Xu ]
  * SSH2: handle SSH2_MSG_EXT_INFO out of login.

  [ David Prévot ]
  * Drop phpcs calls

 -- David Prévot <taffit@debian.org>  Thu, 26 Dec 2024 11:47:56 +0100

php-phpseclib (2.0.47-3) unstable; urgency=medium

  * Make provider classes static (PHPUnit 11 fix) (Closes: #1070588)

 -- David Prévot <taffit@debian.org>  Thu, 10 Oct 2024 16:25:18 +0100

php-phpseclib (2.0.47-2) unstable; urgency=medium

  * Use --require-file for phpabtl (Closes: #1073568)
  * Update Standards-Version to 4.7.0

 -- David Prévot <taffit@debian.org>  Wed, 19 Jun 2024 13:47:47 +0200

php-phpseclib (2.0.47-1) unstable; urgency=medium

  [ terrafrost ]
  * BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354]
  * ASN1: limit OID length [CVE-2024-27355] (GHSA-2528-jw5q-ww88)
  * BigInteger: phpseclib 2.0 updates
  * CHANGELOG: add 1.0.23 release

  [ David Prévot ]
  * Mention CVE-2023-48795 in previous changelog entry

 -- David Prévot <taffit@debian.org>  Mon, 26 Feb 2024 22:21:42 +0100

php-phpseclib (2.0.46-1) unstable; urgency=medium

  [ terrafrost ]
  * Rijndael: fix for PHP 8.3+ compatability
  * X509: fix for weird characters in subjaltname
  * Crypt/Base: improve ARM detection code
  * SSH2: add support for RFC8308
  * SSH2: only capture login info once
  * SSH2: implement terrapin attack countermeasures [CVE-2023-48795]
  * CHANGELOG: add 1.0.22 release

 -- David Prévot <taffit@debian.org>  Fri, 29 Dec 2023 13:59:49 +0100

php-phpseclib (2.0.45-1) unstable; urgency=medium

  [ terrafrost ]
  * SFTP: make it so SFTP::RESUME also sets offset of local file
  * SFTP: RESUME_START didn't work as described
  * SFTP: fix SFTPv2 errors when logging errors
  * SFTP: fix issue with get() downloading to files / streams
  * Rijndael: fix E_DEPRECATED
  * CHANGELOG: add 2.0.45 release

  [ Kevin Reniers ]
  * Add EOF test to SSH2::isConnected

  [ David Prévot ]
  * Skip test failing with recent PHPUnit (Closes: #1039817)
  * Comply with phpcs expectations

 -- David Prévot <taffit@debian.org>  Sat, 16 Sep 2023 19:12:35 +0530

php-phpseclib (2.0.44-1) unstable; urgency=medium

  [ terrafrost ]
  * SFTP: fix NET_SFTP_ATTR_EXTENDED
  * X509: backport EV subjects
  * SSH2: backport some E_DEPRECATED fixes from 3.0
  * SSH2: fix more E_DEPRECATE_NOTICEs
  * CHANGELOG: add 2.0.44 release

 -- David Prévot <taffit@debian.org>  Tue, 20 Jun 2023 13:34:17 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog php-phpseclib`.
