[From nobody Mon Mar 23 09:07:08 2026 Received: (at 1131484-close) by bugs.debian.org; 23 Mar 2026 09:05:15 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_NONE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 84; hammy, 150; neutral, 152; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:60594) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w4bDn-00CkJn-2e for 1131484-close@bugs.debian.org; Mon, 23 Mar 2026 09:05:15 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w4bDm-00Da4F-0H for 1131484-close@bugs.debian.org; Mon, 23 Mar 2026 09:05:14 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=JQjSzh1ihl7a8KCxlVz8Bj+U6f5rABbZDfXsPSAPTXo=; b=Sps39lugY8UsljTTuu/rcUOR88 5VZdJSpuXgPAAtM7VlG5ZR38EakZhC9RMBuodItIqGQ85llwTeyHy0y53fFgvAkLrovMd6Ljp4uYl AG+1mR0BQQUjYI+CTH+temBRp7XW8VpudkDzxIT31SaDRALQVzKWt6mP7GxaU9cGQt62vvmqbL1xg Q1tT84T7v9XcJe1CJtbf54ZHMoZuNA79OnSJPFH47Ib2FkvbOZPECG2OITUPTdxuLwL/abrSMBm/0 Am9hVYNUdUcJzoLeOjk9zOfJP/Lu9lWEnE9Ek6jDbAAPECxASDnBT27kpfLSsNhtGQ2wtMLMAcKJZ vAY2P6rg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w4bDk-0000000Aj7m-3s8N; Mon, 23 Mar 2026 09:05:12 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?David_Pr=C3=A9vot?= <taffit@debian.org> To: 1131484-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: phpseclib Debian: DAK Debian-Changes: phpseclib_1.0.27-1_source.changes Debian-Source: phpseclib Debian-Version: 1.0.27-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1131484: fixed in phpseclib 1.0.27-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3146187846541187737==" Message-Id: <E1w4bDk-0000000Aj7m-3s8N@fasolo.debian.org> Date: Mon, 23 Mar 2026 09:05:12 +0000 --===============3146187846541187737== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: phpseclib Source-Version: 1.0.27-1 Done: David Pr=C3=A9vot <taffit@debian.org> We believe that the bug you reported is fixed in the latest version of phpseclib, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1131484@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. David Pr=C3=A9vot <taffit@debian.org> (supplier of updated phpseclib package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Mar 2026 13:20:40 +0100 Source: phpseclib Architecture: source Version: 1.0.27-1 Distribution: unstable Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Pr=C3=A9vot <taffit@debian.org> Closes: 1131484 Changes: phpseclib (1.0.27-1) unstable; urgency=3Dmedium . [ terrafrost ] * SCP: fix some longstanding issues * BigInteger: fix for PHP 8.5 deprecations for BCMath / toBytes() * RSA: add support for OpenSSH pub keys with multiple spaces / tabs * RSA: fix for PHP 8.5 deprecations for RSA / PSS * BigInteger: another PHP 8.5 deprecation fix * fix for PHP 8.5 BC breaking changes on 32-bit machines * make unpadding constant time [CVE-2026-32935] (Closes: #1131484) * X509: add support for organizationIdentifier * CHANGELOG: add 1.0.27 release Checksums-Sha1: f63bdd4ad504940596e5b810e54c0fd2b2eb25de 1763 phpseclib_1.0.27-1.dsc 6a7fe7e626abe3ef51ce885b1249aa6c733c53fe 429768 phpseclib_1.0.27.orig.tar.xz 4ddce1cc5912151fa7c8cbc6a625a3d85d68ce4d 15520 phpseclib_1.0.27-1.debian.tar= .xz d133912dd412d99df99419f9083ed403dff02c11 7287 phpseclib_1.0.27-1_amd64.build= info Checksums-Sha256: e164f451d3bc1ff22054a9cea6abe6337b7e689650c620afdeba80611ed12ec7 1763 phpsec= lib_1.0.27-1.dsc 7303f3c5ead835c5241f8f838cf4bb1fed80f85f376838b127a6700ca6ec84d3 429768 phps= eclib_1.0.27.orig.tar.xz 0e15fe4c9bac9c51e3ecdf5b1584df947c6912b2f83cbc058f0f25db29db935a 15520 phpse= clib_1.0.27-1.debian.tar.xz a7c7b737ae189cd12effb5b5cbf56c0f5d88f3616ce12f97dc95f7da97fe5f0f 7287 phpsec= lib_1.0.27-1_amd64.buildinfo Files: d6a763aa8b1bdc6927427114bdd6a73f 1763 php optional phpseclib_1.0.27-1.dsc f9b4731f1bc2e1f4713422c203f817ad 429768 php optional phpseclib_1.0.27.orig.t= ar.xz b884a76b4ee3144459bd7a08e24fe745 15520 php optional phpseclib_1.0.27-1.debia= n.tar.xz 88bcd917af3a4afb788dcec765ea113b 7287 php optional phpseclib_1.0.27-1_amd64.= buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnA/EYSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r087VoH/A+G89SH8zuFBCXlDXAfTUB+bRAGuv+q 95uNz1Uo39WFLYvWve6EQqDlLRiOnomcfhKtio1xcTG4m5li/X9OH+9FB+W0SJUN Iwue9pJkd3vNAs6GHRgzWP4Z22wRxyga+8nIylgOj7DFE9t8N9Pr6VNTGbfY3Z1r UfwY/tZq3XSDclD2CAwQiGHmwbO51JlGAlIY4+IIS29SFJZuU8I2t8hlWFn9mfLv Us4lVQd66+wsjOmPQEDQc6WOimuiKRdx65897itQpYKNcRqGmIdCBqZGKLdJqbdZ M5Pc9Gm3Z920dGrlcNNtlIbOTtqpy2za+hMWPQMjFMbFUhKool/sNFE=3D =3DefBr -----END PGP SIGNATURE----- --===============3146187846541187737== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCacECSAAKCRCb9qggYcy5 ITuTAQDfWU24sd4mi/TQDIL/BbFXbk41ydWoiNlrKokFX31bfQD+KL43e2R+28BV q2dRx7u/w/SOF1ITEeG+gVlRkRIvWQc= =CyaF -----END PGP SIGNATURE----- --===============3146187846541187737==-- ]