Packages / Debian 13 (Trixie) / Source / php / phpseclib

Source Package: phpseclib (1.0.23-6+deb13u1)

implementations of an arbitrary-precision integer arithmetic library

The following binary packages are built from this source package:

php-seclib
implementations of an arbitrary-precision integer arithmetic library

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-55599] phpseclib is a PHP secure communications library. From 0.1.1 until 1.0.30, 2.0.55, and 3.0.54, when an application validates an untrusted X.509 certificate with phpseclib, X509::validateSignature() re	Medium(5.8)	Interessata Dettagli (2) `1.0.23-6+deb13u1` · all · trixie-security Interessata nvd · phpseclib · debian · 13 `1.0.23-6+deb13u1` · all · trixie-security Interessata nvd · phpseclib · debian · 13

Versioni corrette e non interessate (1)

CVE	Gravità	Impatto per versione
[CVE-2021-30130] php-phpseclib: CVE-2021-30130	Medium	Corretta Dettagli (2) `1.0.23-6+deb13u1` · all · trixie-security Corretta · Corretta: `1.0.19-3` dsa · phpseclib · debian · 13 `1.0.23-6+deb13u1` · all · trixie-security Corretta · Corretta: `1.0.19-3` dsa · phpseclib · debian · 13

Ultima sincronizzazione: Oct 24, 2026, 1:10:37 AM UTC

[Catalogo CVE]

Fonti

Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result
match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result
match verified
Debian 13 (Trixie) security main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Observed SHA-256
a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Result
match verified
Debian SecurityOct 23, 2026
Authoritative source; repository metadata signature verified
Prova della firma
trixie-security-main-amd64:320ce5ef5baed8f5681bb6c153316450dd6fb11a1cf20625a4d528225b3200f0
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
315dd6598f6204029735ba97f62f8a9f9fc08b32c9592e4587724de92fd5b46d
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Oct 23, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
320ce5ef5baed8f5681bb6c153316450dd6fb11a1cf20625a4d528225b3200f0
Observed SHA-256
320ce5ef5baed8f5681bb6c153316450dd6fb11a1cf20625a4d528225b3200f0
Result
match verified