[From nobody Thu Apr 2 18:21:12 2026 Received: (at 1131483-close) by bugs.debian.org; 2 Apr 2026 17:19:33 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_NONE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 51; hammy, 150; neutral, 139; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:39334) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8Lhd-007kKx-1e for 1131483-close@bugs.debian.org; Thu, 02 Apr 2026 17:19:33 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8Lhb-0093xJ-2D for 1131483-close@bugs.debian.org; Thu, 02 Apr 2026 17:19:31 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=iLvE7pw3v6wOuiu5X2XcGovRPR79274liBw+2JCLDcI=; b=kt7TZvYrsFOIOZfe2ZVMquYhyW MxEneymahraJnER9NKdK0verXLhUgV+t9oT5p7MR2++n6ry7HibyTVKug95LrvI2is2Aq8fspaTLT G1+Xp/eWnmaryAc2FK/uib4BkVYfdgHldaGIVEswsoWKTL2i07E4YueSYzczgkqc4HiwHG+VDxuFb PvdrXNCTNi6zCudsbYrPcMlhl4ZlC5Z1R90E/5R74SJpt49/sBmDDEi0bOv7QCRq92Yn1KVePNoZA V8aUhe/R/+6iqTe0MNwdpFMPM8gZnZu/t1XxfOIHYzw1Rc3CLM2toxHvYS06AtMboCVdB0qfemNb6 AF81IN5g==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w8Lha-00000001THE-2Alt; Thu, 02 Apr 2026 17:19:30 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?David_Pr=C3=A9vot?= <taffit@debian.org> To: 1131483-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: php-phpseclib Debian: DAK Debian-Changes: php-phpseclib_2.0.48-3+deb13u1_source.changes Debian-Source: php-phpseclib Debian-Version: 2.0.48-3+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1131483: fixed in php-phpseclib 2.0.48-3+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2759523574247285339==" Message-Id: <E1w8Lha-00000001THE-2Alt@fasolo.debian.org> Date: Thu, 02 Apr 2026 17:19:30 +0000 --===============2759523574247285339== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: php-phpseclib Source-Version: 2.0.48-3+deb13u1 Done: David Pr=C3=A9vot <taffit@debian.org> We believe that the bug you reported is fixed in the latest version of php-phpseclib, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1131483@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. David Pr=C3=A9vot <taffit@debian.org> (supplier of updated php-phpseclib pack= age) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Mar 2026 08:44:18 +0100 Source: php-phpseclib Architecture: source Version: 2.0.48-3+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Pr=C3=A9vot <taffit@debian.org> Closes: 1131483 Changes: php-phpseclib (2.0.48-3+deb13u1) trixie-security; urgency=3Dmedium . * Track trixie branch * make unpadding constant time [CVE-2026-32935] (Closes: #1131483) Checksums-Sha1: 2a251b3faa374e3b8c667c891b214ba51b449022 1833 php-phpseclib_2.0.48-3+deb13u1= .dsc 70edbb74b85af5e0054fc511336df0d2bfb5c77c 429764 php-phpseclib_2.0.48.orig.ta= r.xz 30765fd69d060e29327edfdbe87d04f826aacd50 17780 php-phpseclib_2.0.48-3+deb13u= 1.debian.tar.xz f975d77ab6fb6d6b9c3ae906cd4ef5e9ff362464 7637 php-phpseclib_2.0.48-3+deb13u1= _amd64.buildinfo Checksums-Sha256: 1b15f1e1220f0a3a4dd7a05a709bbd41da1dd6ecb3414951dca07608a4aa0cce 1833 php-ph= pseclib_2.0.48-3+deb13u1.dsc 75862dab045d8610b396feecf754d286242945abde29f59444ddd80b0f583990 429764 php-= phpseclib_2.0.48.orig.tar.xz 2ce41186e515b930454d1c8b0ad7f09a1d84ddda3875cc1a58a768ad34bc9c0a 17780 php-p= hpseclib_2.0.48-3+deb13u1.debian.tar.xz ef1fe313e9c3f885397406596bf407875bcfa334d5cb8e98ace6e678b8772a4b 7637 php-ph= pseclib_2.0.48-3+deb13u1_amd64.buildinfo Files: 586b4c25e565e8a3ec896c85589c3a5a 1833 php optional php-phpseclib_2.0.48-3+de= b13u1.dsc e748cdf385929a65307f5990b516f765 429764 php optional php-phpseclib_2.0.48.or= ig.tar.xz 1f71f8060f639226b99608fa6caeb641 17780 php optional php-phpseclib_2.0.48-3+d= eb13u1.debian.tar.xz 29395e7786d57d73b9df19c275d0817c 7637 php optional php-phpseclib_2.0.48-3+de= b13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnGIO8SHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08NEoH/1WPpzpINyh8ZqH7jr56C3msc9dwa6XD hwOZU+gdrvCqDO0OemrXgTk32fHAm7iFjHz9M8qbwjxFpOu4r3EYG8PBRp7Zyx82 ROpcUdxuvgbF/e3/XcKlCXLjzxLkZGxfHXukpYkrSP2YO51IQLcKIyqX9LAXXJCO 9IBeK1CVfLCebS9elr23PBv4V/ZUg63YPiOCSZG0dczQLh7UXrlYEGbYydjQqbdf q9IeKM6HeoGUnmqP+5Vng1/04owhxQchnaU388T95E3ajA9JpRaUCgNTemXb/8qW jYXbZ3cHyEzZnSNVf0Qepp076ZOBdNpb1tpyKxYje5YHitTY6ClJIfo=3D =3D2U7a -----END PGP SIGNATURE----- --===============2759523574247285339== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCac6lIgAKCRCb9qggYcy5 IWUzAQChm/mh7OAh7slJUN6D0ZyjnTjyktCufFAvMkiH8N17pQD+P+si8xjGxSPU SY0seOVa0tYAjh4buAw2smlFozyhcg0= =ywxK -----END PGP SIGNATURE----- --===============2759523574247285339==-- ]