tocsin

Debian/phpseclib: high 7.5

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.

Action: Upgrade phpseclib to 1.0.19-3 or later.

Affected

introducedfixedlast affected
01.0.19-3-

Fixed versions

1.0.19-3

Sources

published · modified · JSON