Skip to content

chore(deps): bump phpseclib/phpseclib from 3.0.43 to 3.0.55 - #3870

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/phpseclib/phpseclib-3.0.55
Open

chore(deps): bump phpseclib/phpseclib from 3.0.43 to 3.0.55#3870
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/phpseclib/phpseclib-3.0.55

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Contributor

Bumps phpseclib/phpseclib from 3.0.43 to 3.0.55.

Release notes

Sourced from phpseclib/phpseclib's releases.

3.0.55

  • RSA: signature verification with PKCS1 with failed when the parameters field was absent

3.0.54

  • X509: add setURLFetchCallback() method

3.0.53

  • RSA: decryption with password protected keys didn't work with OpenSSL engine (#2140)
  • ASN1: speed up OID calculations
  • SFTP: add hardlink() method (#2142)
  • DES: fix PHP deprecations (#2145)

3.0.52

  • ASN1: more stringent OID length limits (CVE-2026-44167)
  • RSA: OpenSSL 3.2+ changed how PKCS1 decryption works (#2136)
  • Keys/OpenSSH: support comments with spaces in them (#2137)

3.0.51

  • SSH2: use constant time string comparison in get_binary_packet() (CVE-2026-40194)
  • RSA: add sha3 support (#2132)
  • use new OpenSSL functionality (#2130)

3.0.50

  • fix for PHP 8.5 BC breaking changes on 32-bit machines (#2126)
  • make unpadding in CBC mode constant time (CVE-2026-32935)
  • X509: add support for organizationIdentifier (#2128)

3.0.49

  • more PHP 8.5 deprecations (#2113)
  • Keys/OpenSSH: add support for pub keys with multiple spaces / tabs (#2116)

3.0.48

  • readd SCP support (#2108)
  • SSH2: adjust want_reply handling for GLOBAL_REQUEST and CHANNEL_REQUEST (#2111)
  • ASN1: add more validation checks to asn1map (#2104)
  • RSA/PSS: more elegant int conversion (#2107)
  • more PHP 8.5 deprecations (#2103, #2113)

3.0.47

  • fix PHP 8.5 deprecations
  • SFTP: check if realpath succeeded when changing SFTP directory (#2098)
  • SFTP: add copy() method (only usable if copy-data ext is available) (#2101)

3.0.46

  • BigInteger/BCMath: strict_types fix (#2089)

3.0.45

  • BigInteger: modPow() calls with negative base gave incorrect result (#2086)
  • BigInteger: barrett reduction returned '' vs '0' for bcmath engine (#2087)

... (truncated)

Changelog

Sourced from phpseclib/phpseclib's changelog.

3.0.55 - 2026-06-14

  • RSA: signature verification with PKCS1 with failed when the parameters field was absent

3.0.54 - 2026-06-14

  • X509: add setURLFetchCallback() method

3.0.53 - 2026-06-09

  • RSA: decryption with password protected keys didn't work with OpenSSL engine (#2140)
  • ASN1: speed up OID calculations
  • SFTP: add hardlink() method (#2142)
  • DES: fix PHP deprecations (#2145)

3.0.52 - 2026-04-27

  • ASN1: more stringent OID length limits (CVE-2026-44167)
  • RSA: OpenSSL 3.2+ changed how PKCS1 decryption works (#2136)
  • Keys/OpenSSH: support comments with spaces in them (#2137)

3.0.51 - 2026-04-09

  • SSH2: use constant time string comparison in get_binary_packet() (CVE-2026-40194)
  • RSA: add sha3 support (#2132)
  • use new OpenSSL functionality (#2130)

3.0.50 - 2026-03-18

  • fix for PHP 8.5 BC breaking changes on 32-bit machines (#2126)
  • make unpadding in CBC mode constant time (CVE-2026-32935)
  • X509: add support for organizationIdentifier (#2128)

3.0.49 - 2026-01-27

  • more PHP 8.5 deprecations (#2113)
  • Keys/OpenSSH: add support for pub keys with multiple spaces / tabs (#2116)

3.0.48 - 2025-12-15

  • readd SCP support (#2108)
  • SSH2: adjust want_reply handling for GLOBAL_REQUEST and CHANNEL_REQUEST (#2111)
  • ASN1: add more validation checks to asn1map (#2104)
  • RSA/PSS: more elegant int conversion (#2107)
  • more PHP 8.5 deprecations (#2103, #2113)

3.0.47 - 2025-10-05

  • fix PHP 8.5 deprecations
  • SFTP: check if realpath succeeded when changing SFTP directory (#2098)

... (truncated)

Commits
  • db9744e Merge branch '3.0' of github.com:phpseclib/phpseclib into 3.0
  • 1f0c555 RSA: types in the comment
  • 4f5414f CHANGELOG: new release
  • d7b53f6 RSA: PKCS1 signature verification didn't always work with OpenSSL
  • 89a3dae Merge branch '2.0' into 3.0
  • efbc42c Merge branch '1.0' into 2.0
  • b732ef5 README: update 1.0 download link
  • 5418963 Merge branch '2.0' into 3.0
  • d73c9e0 Merge branch '1.0' into 2.0
  • fa867e5 CHANGELOG: add new release
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib) from 3.0.43 to 3.0.55.
- [Release notes](https://github.com/phpseclib/phpseclib/releases)
- [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md)
- [Commits](phpseclib/phpseclib@3.0.43...3.0.55)

---
updated-dependencies:
- dependency-name: phpseclib/phpseclib
  dependency-version: 3.0.55
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Jun 20, 2026
@cypress

cypress Bot commented Jun 20, 2026

Copy link
Copy Markdown

Employee portal    Run #9103

Run Properties:  status check passed Passed #9103  •  git commit 0c0462f970 ℹ️: Merge 2619e70fd7af1d8c78ce8c1a74beff02836081ca into f156130b25b0e39758b869f59795...
Project Employee portal
Branch Review refs/pull/3870/merge
Run status status check passed Passed #9103
Run duration 00m 23s
Commit git commit 0c0462f970 ℹ️: Merge 2619e70fd7af1d8c78ce8c1a74beff02836081ca into f156130b25b0e39758b869f59795...
Committer dependabot[bot]
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 0
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 4
View all changes introduced in this branch ↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants