[From nobody Thu Apr  2 17:51:04 2026
Received: (at 1131482-close) by bugs.debian.org; 2 Apr 2026 16:48:40 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD,
 HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,
 SPF_HELO_PASS,SPF_NONE,USER_IN_DKIM_WELCOMELIST autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 47; hammy, 150; neutral, 142; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz,
 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from mitropoulos.debian.org
 ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:36428)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1w8LDk-007gTW-2h for 1131482-close@bugs.debian.org;
 Thu, 02 Apr 2026 16:48:40 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by mitropoulos.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1w8LDj-00927A-0k for 1131482-close@bugs.debian.org;
 Thu, 02 Apr 2026 16:48:39 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=bCnZFktXF1MXLoV7+qVYlhpKWGi//P6r5MQSduKacvk=; b=Nw8mKRiZtmK5O7nRM4XnGCms8f
 jkN06VFBkjTDNnOMQf3gywQHwGNy6FXOuQ3O+hcjd07ymwlQX9Mk9+wgyOt5YU1OiKuZnjOypv4Mg
 fUVtCCjBkMSERfz3bjvgXsfiOcVis2jPVxP6R5r5D2/Wvs2V8G62mxjzI7zUjgajWJFXkHdXU3E4o
 MWXwfJF8IufNfrt1/KHoRm3s+Brei8ucZipVVTOD/QKedvtwNdmBUT0EhsDMKnXoB8NCrYaappNgj
 nqYziPaPm4IV+hK49KyjU2D9M7X4ZcJTIQUZCM1Xoy6nB/f1ZOsUrLu51Ne/SFPrMvjxEaT8iDESH
 052ByKRQ==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1w8LDi-00000001P3a-0GbR; Thu, 02 Apr 2026 16:48:38 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: =?utf-8?q?David_Pr=C3=A9vot?= &lt;taffit@debian.org&gt;
To: 1131482-close@bugs.debian.org
X-DAK: dak process-policy
X-Debian: DAK
X-Debian-Package: php-phpseclib3
Debian: DAK
Debian-Changes: php-phpseclib3_3.0.19-1+deb12u4_source.changes
Debian-Source: php-phpseclib3
Debian-Version: 3.0.19-1+deb12u4
Debian-Architecture: source
Debian-Suite: oldstable-proposed-updates
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1131482: fixed in php-phpseclib3 3.0.19-1+deb12u4
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============9157399954210095793==&quot;
Message-Id: &lt;E1w8LDi-00000001P3a-0GbR@fasolo.debian.org&gt;
Date: Thu, 02 Apr 2026 16:48:38 +0000

--===============9157399954210095793==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: php-phpseclib3
Source-Version: 3.0.19-1+deb12u4
Done: David Pr=C3=A9vot &lt;taffit@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
php-phpseclib3, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1131482@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
David Pr=C3=A9vot &lt;taffit@debian.org&gt; (supplier of updated php-phpseclib3 pac=
kage)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 08:34:55 +0100
Source: php-phpseclib3
Architecture: source
Version: 3.0.19-1+deb12u4
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers &lt;pkg-php-pear@lists.alioth.debian.org&gt;
Changed-By: David Pr=C3=A9vot &lt;taffit@debian.org&gt;
Closes: 1131482
Changes:
 php-phpseclib3 (3.0.19-1+deb12u4) bookworm-security; urgency=3Dmedium
 .
   * make unpadding constant time [CVE-2026-32935] (Closes: #1131482)
   * X509: fix for weird characters in subjaltname [CVE-2023-52892]
Checksums-Sha1:
 1f5f4b0b5d237038b10e1f1390b82ad1e03330c5 1907 php-phpseclib3_3.0.19-1+deb12u=
4.dsc
 60a4469a48463c6710653d49c3f261d98c63dd8b 172208 php-phpseclib3_3.0.19-1+deb1=
2u4.debian.tar.xz
 f421d0015b4719a4fb78f466ce4b04d291d2e0ab 8155 php-phpseclib3_3.0.19-1+deb12u=
4_amd64.buildinfo
Checksums-Sha256:
 557371ff0ebf0e66401a8e00be6619de9e1bd9c9796c1718aba6473af68d208b 1907 php-ph=
pseclib3_3.0.19-1+deb12u4.dsc
 3695362e29c736ce75f846ce4d5c10a2c97309ba7dd5c0ab7ad9220b44af5381 172208 php-=
phpseclib3_3.0.19-1+deb12u4.debian.tar.xz
 b12bce2cdde2583d8d2f810a08be377a0cfcac632bfeaae56726ff01031584ec 8155 php-ph=
pseclib3_3.0.19-1+deb12u4_amd64.buildinfo
Files:
 e22841058134740e8335d44c81cf9e51 1907 php optional php-phpseclib3_3.0.19-1+d=
eb12u4.dsc
 33f86967e36f1eba3ab1240a951aabd4 172208 php optional php-phpseclib3_3.0.19-1=
+deb12u4.debian.tar.xz
 88ba21c041c20ddcff7ff6c811b8393d 8155 php optional php-phpseclib3_3.0.19-1+d=
eb12u4_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnGIPQSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08QRYH/An5csytlq47VAHsbiPbgfOE5a/mSWVt
BKxvOZZPfWDHRn6QWUIX7iv1f3aMo9GQb6s4z7UgNnzfQzRlnvvmjNKtolif3nXG
MSTdke6yFyO7pOkQw2tXqUEnqJunansxGawYFee4jjBZxSL4RnrqLct7XeY3HZAY
XVI+caxvQ41IPdjniIt4hU5UvoarZlEWvQwVodEtkTt5+vgVCBbsRAt3FyEAYmk5
5IoqfWZ7+i1J8BSiaPpdJJdUThuyy+eHOmvScbjAg61nt3HiNv+CNun5dU4cwma2
f/FQuokJEc7e/+PAUKLOpnxDkibIK4mAgteCO01cTzZCF3azcUDtyMQ=3D
=3DJEoW
-----END PGP SIGNATURE-----


--===============9157399954210095793==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCac6d5gAKCRCb9qggYcy5
IfPRAP9CCvIbnvjgyXlVOmMWa74XtzTDddg7Fff5K0Ufgc2Q0QD/VE/3FIQTg3B+
diPRHL8ygw8IC4YGvcXIMdgjug9QXwM=
=yG3Y
-----END PGP SIGNATURE-----

--===============9157399954210095793==--
]