php-phpseclib3 (3.0.37-1) unstable; urgency=medium

  [ terrafrost ]
  * SSH2: don't set stream timeout if timeout is 0
  * CHANGELOG: 3.0.37 release

  [ David Prévot ]
  * Fix test autoload.php for recent pkg-php-tools

 -- David Prévot <taffit@debian.org>  Sun, 03 Mar 2024 13:33:35 +0100

php-phpseclib3 (3.0.36-1) unstable; urgency=medium

  [ terrafrost ]
  * EC: when using openssl to do signing use unencrypted key
  * SSH2: tweaks to isConnected()
  * BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354]
  * ASN1: limit OID length [CVE-2024-27355]
  * CHANGELOG: add 1.0.23 release

  [ David Prévot ]
  * Mention CVE-2023-48795 in previous changelog entry
  * Force system dependencies loading

 -- David Prévot <taffit@debian.org>  Mon, 26 Feb 2024 22:15:41 +0100

php-phpseclib3 (3.0.35-1) unstable; urgency=medium

  [ terrafrost ]
  * SSH2: only capture login info once
  * Crypt/AsymmetricKey: loading hidden custom key plugins didn't work
  * SSH2: implement terrapin attack countermeasures [CVE-2023-48795]
  * CHANGELOG: add 1.0.22 release

 -- David Prévot <taffit@debian.org>  Fri, 29 Dec 2023 13:54:54 +0100

php-phpseclib3 (3.0.34-1) unstable; urgency=medium

  [ terrafrost ]
  * Math/BinaryField: fix for excessively large degrees
    [CVE-2023-49316] (Closes: #1057008)
  * PrimeField: fix error with squareRoot method
  * EC/Signature/Format: add new IEEE format
  * SSH2: don't use AES GCM for TurboFTP Server
  * PKCS8: RC2 encrypted keys didn't work
  * PKCS8: PBES2 / DES encrypted keys didn't work
  * SSH2: add support for RFC8308
  * SSH2: reset more internal variables when connection is reset
  * BigInteger/Engines/PHP: Windows JIT impl issue has been resolved
  * CHANGELOG: add 3.0.34 release

 -- David Prévot <taffit@debian.org>  Tue, 28 Nov 2023 08:03:06 +0100

php-phpseclib3 (3.0.33-1) unstable; urgency=medium

  [ Daniil Gentili ]
  * Move JIT check to BigInteger

  [ terrafrost ]
  * Rijndael: fix for PHP 8.3+ compatibility
  * X509: fix for weird characters in subjaltname
  * Crypt/Base: improve ARM detection code
  * CHANGELOG: add 3.0.33 release

 -- David Prévot <taffit@debian.org>  Thu, 26 Oct 2023 08:20:55 +0200

php-phpseclib3 (3.0.23-1) unstable; urgency=medium

  [ pafernandez-oesia ]
  * Fix Undefined index jit notice

  [ terrafrost ]
  * CHANGELOG: add 3.0.23 release

 -- David Prévot <taffit@debian.org>  Tue, 19 Sep 2023 09:22:43 +0530

php-phpseclib3 (3.0.22-1) unstable; urgency=medium

  [ terrafrost ]
  * BigInteger: use GMP if it's available
  * SFTP: fix SFTPv2 errors when logging errors
  * SFTP: fix issue with get() downloading to files / streams
  * Rijndael: fix E_DEPRECATED
  * CHANGELOG: add 2.0.45 release

 -- David Prévot <taffit@debian.org>  Sat, 16 Sep 2023 18:13:28 +0530

php-phpseclib3 (3.0.21-2) unstable; urgency=medium

  * Depends on php-bcmath at least needed on 32-bits architectures

 -- David Prévot <taffit@debian.org>  Thu, 20 Jul 2023 13:09:11 +0200

php-phpseclib3 (3.0.21-1) unstable; urgency=medium

  [ terrafrost ]
  * BigInteger: speed up powMod() method
  * SFTP: make it so SFTP::RESUME also sets offset of local file
  * SFTP: RESUME_START didn't work as described
  * SSH2: attempt at fixing stream_select(): unable to select [4]
  * CHANGELOG: add 3.0.21 release

  [ Kevin Reniers ]
  * Add EOF test to SSH2::isConnected

 -- David Prévot <taffit@debian.org>  Tue, 11 Jul 2023 07:44:15 +0200

php-phpseclib3 (3.0.20-1) unstable; urgency=medium

  [ terrafrost ]
  * SFTP: fix NET_SFTP_ATTR_EXTENDED
  * RSA: setting sig padding broke enc padding and vice versa
  * SFTP: add optional $recursive parameter to filesize()
  * X509: backport EV subjects
  * SSH2: backport some E_DEPRECATED fixes from 3.0
  * CHANGELOG: add 2.0.43 release

  [ Steven Hetland ]
  * ASN1: 3.0 decodeBER() was optimized to remove duplicate work.
  * SFTP typehint fixes

  [ Léon Melis ]
  * X509::getChain() should always return array of X509 objects

  [ David Prévot ]
  * Mention security bug in previous changelog entry
  * Drop PHPUnit compatibility code
  * Compatibility with recent PHPUnit (10)

 -- David Prévot <taffit@debian.org>  Sun, 18 Jun 2023 12:54:50 +0200

php-phpseclib3 (3.0.19-1) unstable; urgency=medium

  [ Alexander Vlasov ]
  * Fix undefined properties deprecated in PHP 8.2

  [ terrafrost ]
  * Tests: PHPUnit 10 updates
  * AsymmetricKey: error out on unsupported operations
  * Blowfish: fix issues on 32-bit PHP installs
  * BigInteger: fix for hex numbers with new lines in them
  * PrimeField: prevent infinite loop with composite primefields
    [CVE-2023-27560] (Closes: #1032371)
  * SSH2: backport getTimeout()
  * CHANGELOG: add 3.0.19 release

  [ Kevin van Hulst ]
  * fix "Creating default object from empty value" error

  [ David Prévot ]
  * Use secure URI in Homepage field.
  * Update standards version to 4.6.2, no changes needed.

 -- David Prévot <taffit@debian.org>  Mon, 06 Mar 2023 08:00:12 +0100

php-phpseclib3 (3.0.18-1) unstable; urgency=medium

  [ terrafrost ]
  * Crypt/Base: add a function to check continuous buffer status
  * SSH2: if logging in with rsa-sha2-256/512 fails, try ssh-rsa
  * OpenSSL 3.0.1+ deprecated some algorithms

  [ Côme Chilliet ]
  * Fix PHP 8.2 dynamic property warning

  [ Simon Podlipsky ]
  * fix: drop use of "self" in callable as it's deprecated since php 8.2

 -- David Prévot <taffit@debian.org>  Wed, 21 Dec 2022 07:37:08 +0100

php-phpseclib3 (3.0.17-1) unstable; urgency=medium

  [ Jeremy Albert ]
  * Avoid implicit conversion from float to int

  [ terrafrost ]
  * CHANGELOG: add 2.0.39 release

 -- David Prévot <taffit@debian.org>  Wed, 26 Oct 2022 19:13:09 +0200

php-phpseclib3 (3.0.16-2) unstable; urgency=medium

  * Skip test failing on s390x architecture

 -- David Prévot <taffit@debian.org>  Mon, 12 Sep 2022 07:19:21 -0400

php-phpseclib3 (3.0.16-1) unstable; urgency=medium

  [ terrafrost ]
  * SFTP: fix enableDatePreservation bug w.r.t. mtime
  * BigInteger: tweak to the phpinfo checks
  * SSH2: make login method return false under rare situation
  * SFTP: try to delete dir even if it can't be opened
  * SSH2: fix possibly undefined variable error
  * SFTP: try without path canonicalization if initial realpath() fails
  * don't use dynamic properties, which are deprecated in PHP 8.2
  * BigInteger: fix behavior on 32-bit PHP installs
  * EC/PKCS8: OpenSSL didn't like phpseclib formed Ed25519 public keys
  * fix deprecated implicit float to int on 32-bit PHP 8.1
  * SSH2: fix type hinting for keyboard_interactive_helper
  * CHANGELOG: add 3.0.16 release

  [ Yan Hu ]
  * Detect if stream metadata has wrapper_type set for SFTP put() method

  [ David Prévot ]
  * Mark package as Multi-Arch: foreign

 -- David Prévot <taffit@debian.org>  Thu, 08 Sep 2022 11:15:50 -0400

php-phpseclib3 (3.0.14-1) unstable; urgency=medium

  [ terrafrost ]
  * Crypt/Base: fix CTR mode with continuous buffer with non-eval PHP
  * RSA: add support for loading PuTTY v3 keys
  * Crypt/Base: use sodium_increment in _increment_str
  * BigInteger: add precision to __debugInfo
  * Crypt/Base: fix deprecation notice
  * RSA: conditionally call useBestEngine() when getEngine() is called

  [ David Prévot ]
  * Update d/pkg-php-tools-*
  * Update Standards-Version to 4.6.1
  * Update phpunit call

 -- David Prévot <taffit@debian.org>  Sat, 18 Jun 2022 11:21:13 +0200

php-phpseclib3 (3.0.13-1) unstable; urgency=medium

  [ terrafrost ]
  * SSH2: make login() return false if no valid auth methods are found
  * SSH2: show a more helpful error message when logging in with pubkey
  * Salsa20: fix PHP 5.6 error
  * SSH2: rsa-sha2-256 and rsa-sha2-512 sigs weren't verifying
  * Crypt/Base: add OFB8 as a new mode
  * CHANGELOG: add 2.0.36 release

  [ David Anderson ]
  * Check phpinfo() available before using it

  [ PetrP ]
  * SFTP: fix chgrp() for version < 4

  [ Jack Worman ]
  * Fixed psalm level 6 errors in phpseclib/Net/

 -- David Prévot <taffit@debian.org>  Sun, 30 Jan 2022 22:31:32 -0400

php-phpseclib3 (3.0.12-2) unstable; urgency=medium

  * Fix tests for PHP 8.1 (Closes: #1000647)

 -- David Prévot <taffit@debian.org>  Wed, 12 Jan 2022 12:10:59 -0400

php-phpseclib3 (3.0.12-1) unstable; urgency=medium

  [ terrafrost ]
  * SSH2: add "smart multi factor" login mode (enabled by default)
  * SFTP: getSupportedVersions() call didn't work
  * SSH2: error out when no data is received from the server
  * SFTP: don't attempt to parse unsupported attributes
  * EC: error out when scalar is out of range
  * RSA/Keys/Raw: add support for private keys
  * SymmetricKey: add getMode()
  * CHANGELOG: add 2.0.35 release

 -- David Prévot <taffit@debian.org>  Mon, 29 Nov 2021 10:08:24 -0400

php-phpseclib3 (3.0.11-3) unstable; urgency=medium

  * Skip test failing on 32-bit architectures

 -- David Prévot <taffit@debian.org>  Fri, 26 Nov 2021 11:43:59 -0400

php-phpseclib3 (3.0.11-2) unstable; urgency=medium

  * Revert "Ensure openssl is installed during CI"
  * Install minimal openssl.cnf

 -- David Prévot <taffit@debian.org>  Wed, 24 Nov 2021 14:37:52 -0400

php-phpseclib3 (3.0.11-1) unstable; urgency=medium

  [ terrafrost ]
  * RSA: ssh-keygen -yf private.key fails if \r is present
  * SSH2: add support for zlib and zlib@openssh.com compression
  * CHANGELOG: add 2.0.34 release

  [ Nick Lassonde ]
  * add option to allow arbitrary length packets, for servers like OpenText
    which sends extremely long directory listings

  [ Christopher Davis ]
  * Don't Use Array Unpackage for Status Code -> Error

  [ David Prévot ]
  * Ensure openssl is installed during CI

 -- David Prévot <taffit@debian.org>  Thu, 28 Oct 2021 13:23:33 -0400

php-phpseclib3 (3.0.10-1) unstable; urgency=medium

  [ terrafrost ]
  * SFTP: don't check SFTP packet size after SFTP initialization
  * ASN1: return false when not enough bytes are available
  * SFTP: return false if get_channel_packet returns false
  * PrimeField: plug memory leaks
  * Serializable is being deprecated in PHP 8.1
  * AsymmetricKey: make more methods static
  * CHANGELOG: add 2.0.33 release

  [ Nick Lassonde ]
  * SFTP: timeout during  _init_sftp_connection should be a failure

  [ Claude Pache ]
  * PublicKeyLoader: make all methods static

  [ David Prévot ]
  * Update standards version to 4.6.0, no changes needed.

 -- David Prévot <taffit@debian.org>  Thu, 07 Oct 2021 17:01:12 -0400

php-phpseclib3 (3.0.9-1) unstable; urgency=medium

  [ terrafrost ]
  * CHANGELOG: add 3.0.8 release
  * SFTP: reopen channel on channel closure
  * SSH2: timeout would occasionally infinitely loop
  * SSH2: fix issue with key re-exchange
  * SSH2: fix PHP7.4 errors about accessing bool as string
  * X509: signing with pw protected PSS keys yielded errors
  * X509: extra characters before cert weren't being removed
  * ASN1: change how default values are processed for ints and enums
  * RSA: OAEP decryption didn't check labels correctly

  [ nickyb ]
  * Support for continue auth methods.

  [ danieljankowski ]
  * ASN1: fix timezone issue when non-utc time is given

 -- David Prévot <taffit@debian.org>  Fri, 18 Jun 2021 15:02:45 -0400

php-phpseclib3 (3.0.8-1) unstable; urgency=medium

  [ terrafrost ]
  * cipher_name_openssl_ecb shouldn't be static because of AES
  * AsymetrticKey: add getComment() method

  [ Kyle ]
  * Don't filter basicConstraints on unique values

  [ Bastien Miclo ]
  * Allow one to specify extension value as critical

 -- David Prévot <taffit@debian.org>  Thu, 22 Apr 2021 09:27:30 -0400

php-phpseclib3 (3.0.7-1) unstable; urgency=medium

  [ terrafrost ]
  * CHANGELOG: add 3.0.6 release [CVE-2021-30130]

 -- David Prévot <taffit@debian.org>  Sat, 10 Apr 2021 08:20:21 -0400

php-phpseclib3 (3.0.6-1) unstable; urgency=medium

  [ terrafrost ]
  * SFTP/Stream: make it so you can write past the end of a file
  * SFTP: mkdir on streams didn't work
  * BigInteger: fix issue with toBits on 32-bit PHP 8 installs
  * SFTP: digit only filenames were converted to integers by php

  [ David Prévot ]
  * Generate phpabtpl at build time
  * Drop Replace and Conflict since php-phpseclib 3 didn’t last long

 -- David Prévot <taffit@debian.org>  Wed, 17 Mar 2021 07:35:42 -0400

php-phpseclib3 (3.0.5-1) unstable; urgency=medium

  * Upload to unstable now that the freeze started (no migration to testing
    until Bookworm release cycle starts)

  [ terrafrost ]
  * BigInteger: big speedups for when OpenSSL is used
  * RSA: use OpenSSL for generating private keys
  * CHANGELOG: add 3.0.5 release

  [ David Prévot ]
  * Use dh-sequence-phpcomposer instead of pkg-php-tools

 -- David Prévot <taffit@debian.org>  Sat, 13 Feb 2021 10:18:21 -0400

php-phpseclib3 (3.0.4-1) experimental; urgency=medium

  [ Tomáš Procházka ]
  * Allow newer versions of paragonie/random_compat

  [ terrafrost ]
  * X509: fix niche issue with computeKeyIdentifier
  * SSH/Agent: EC keys didn't work with agent

  [ David Prévot ]
  * Simplify gbp import-orig workflow

 -- David Prévot <taffit@debian.org>  Sun, 31 Jan 2021 09:48:58 -0400

php-phpseclib3 (3.0.3-1) experimental; urgency=medium

  [ terrafrost ]
  * CHANGELOG: add 3.0.3 release

 -- David Prévot <taffit@debian.org>  Mon, 18 Jan 2021 13:15:10 -0400

php-phpseclib3 (3.0.2-1~exp1) experimental; urgency=medium

  * Rename version 3 as php-phpseclib3.
    Upstream changed the classpath in order to allow one to install it along
    with php-phpseclib (version 2). Both versions are supported upstream,
    and packages depending of version 2 are unlikely to be ready to use
    version 3 all together.
  * Install /u/s/p/a/php-phpseclib3

 -- David Prévot <taffit@debian.org>  Sun, 10 Jan 2021 10:01:15 -0400

php-phpseclib (3.0.2-1) experimental; urgency=medium

  * Upload new major version to experimental

  [ terrafrost ]
  * CHANGELOG: add 3.0.1 release

  [ Paragon Initiative Enterprises ]
  * Use paragonie/constant_time_encoding

  [ David Prévot ]
  * Drop phpcs call during test
  * Adapt packaging to new dependencies
  * Install version 3 in its own new path

 -- David Prévot <taffit@debian.org>  Mon, 28 Dec 2020 22:31:54 -0400

php-phpseclib (2.0.30-1) unstable; urgency=medium

  [ terrafrost ]
  * enable unit tests for PHP 8 / PHPUnit 9
  * CHANGELOG: add 2.0.30 entry

 -- David Prévot <taffit@debian.org>  Fri, 18 Dec 2020 23:36:42 -0400

php-phpseclib (2.0.29-2) unstable; urgency=medium

  * Adapt to recent version of PHPUnit (9)
  * Fix field name case in debian/tests/control (Test-command => Test-Command).
  * Update watch file format version to 4.
  * Update Standards-Version to 4.5.1
  * Drop versioned dependency satisfied in stable

 -- David Prévot <taffit@debian.org>  Mon, 14 Dec 2020 11:50:06 -0400

php-phpseclib (2.0.29-1) unstable; urgency=medium

  [ terrafrost ]
  * add 2.0.29 release

  [ David Prévot ]
  * Set upstream metadata fields: Archive.
  * Rename main branch to debian/latest (DEP-14)

 -- David Prévot <taffit@debian.org>  Tue, 08 Sep 2020 11:51:10 -0400

php-phpseclib (2.0.28-1) unstable; urgency=medium

  [ terrafrost ]
  * 2.0.27 release
  * CHANGELOG: there already was a 2.0.27 release..

  [ David Prévot ]
  * Set Rules-Requires-Root: no.
  * Use debhelper-compat 13
  * Simplify override_dh_auto_test

 -- David Prévot <taffit@debian.org>  Thu, 09 Jul 2020 22:35:32 -0400

php-phpseclib (2.0.27-1) unstable; urgency=medium

  [ terrafrost ]
  * CHANGELOG: add entries for 2.0.25 and 2.0.26 release notes

 -- David Prévot <taffit@debian.org>  Mon, 06 Apr 2020 10:19:11 -1000

php-phpseclib (2.0.26-1) unstable; urgency=medium

  * New upstream release

 -- David Prévot <taffit@debian.org>  Sun, 29 Mar 2020 10:22:34 -1000

php-phpseclib (2.0.25-1) unstable; urgency=medium

  [ terrafrost ]
  * CHANGELOG: 2.0.24 release

  [ David Prévot ]
  * Set upstream metadata fields:
    Bug-Database, Bug-Submit, Repository, Repository-Browse.
  * Update Standards-Version to 4.5.0

 -- David Prévot <taffit@debian.org>  Fri, 28 Feb 2020 09:50:37 -1000

php-phpseclib (2.0.23-2) unstable; urgency=medium

  * Revert "Update to current phpcs output"
  * Build-Depend on recent php-codesniffer
  * Set upstream metadata fields: Repository.
  * Drop versioned dependency satisfied in (old)stable
  * Update Standards-Version to 4.4.1

 -- David Prévot <taffit@debian.org>  Mon, 30 Sep 2019 19:06:51 -1000

php-phpseclib (2.0.23-1) unstable; urgency=medium

  [ terrafrost ]
  * SSH2: only do fclose($this->fsock) if doing so won't yield error
  * CHANGELOG: add 2.0.23 release

 -- David Prévot <taffit@debian.org>  Sat, 21 Sep 2019 17:11:46 -1000

php-phpseclib (2.0.22-1) unstable; urgency=medium

  [ terrafrost ]
  * CHANGELOG: add 2.0.22 release

 -- David Prévot <taffit@debian.org>  Mon, 16 Sep 2019 05:40:47 -1000

php-phpseclib (2.0.21-3) unstable; urgency=medium

  * Versioned php-codesniffer dependency to hint CI
  * Remove obsolete fields Name, Contact from debian/upstream/metadata.

 -- David Prévot <taffit@debian.org>  Thu, 29 Aug 2019 10:38:29 -1000

php-phpseclib (2.0.21-2) unstable; urgency=medium

  * Set upstream metadata fields: Contact, Name.
  * Update to current phpcs output
  * Compatibility with recent PHPUnit (8)

 -- David Prévot <taffit@debian.org>  Mon, 12 Aug 2019 06:52:20 -1000

php-phpseclib (2.0.21-1) unstable; urgency=medium

  * Upload to unstable now that buster has been released

  [ terrafrost ]
  * update copyright years on license

  [ David Prévot ]
  * Update copyright (years)
  * Update Standards-Version to 4.4.0

 -- David Prévot <taffit@debian.org>  Fri, 19 Jul 2019 11:16:44 -0300

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog php-phpseclib3`.
