From 86990d518f4434719271fadd112d34b20208f3a9 Mon Sep 17 00:00:00 2001 From: terrafrost Date: Sun, 25 Feb 2024 22:44:00 -0600 Subject: [PATCH] CHANGELOG: add 1.0.23 release --- CHANGELOG.md | 6 ++++++ README.md | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0d7cd428..2c27ec64 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,11 @@ # Changelog +## 1.0.23 - 2024-02-25 + +- BigInteger: add getLength() and getLengthInBytes() methods +- BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354) +- ASN1: limit OID length (CVE-2024-27355) + ## 1.0.22 - 2023-12-28 - SFTP: fix issue with get() downloading to files / streams (#1934) diff --git a/README.md b/README.md index f3deff4f..3e3efa99 100644 --- a/README.md +++ b/README.md @@ -51,7 +51,7 @@ SSH-2, SFTP, X.509, an arbitrary-precision integer arithmetic library, Ed25519 / * PHP4 compatible * Composer compatible (PSR-0 autoloading) * Install using Composer: `composer require phpseclib/phpseclib:~1.0` -* [Download 1.0.22 as ZIP](http://sourceforge.net/projects/phpseclib/files/phpseclib1.0.22.zip/download) +* [Download 1.0.23 as ZIP](http://sourceforge.net/projects/phpseclib/files/phpseclib1.0.23.zip/download) ## Security contact information