[From nobody Thu Apr 2 17:51:06 2026 Received: (at 1131483-close) by bugs.debian.org; 2 Apr 2026 16:48:38 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 50; hammy, 150; neutral, 125; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:52248) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8LDi-007gTK-13 for 1131483-close@bugs.debian.org; Thu, 02 Apr 2026 16:48:38 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8LDi-008LKF-0n for 1131483-close@bugs.debian.org; Thu, 02 Apr 2026 16:48:38 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=K2pDfoCugmmN0ZBU8jvPWwQFWk2Bse6MJz6feDNwJy0=; b=e1hFmV8mMblECndY7w4l7nfFPJ TV8+gCtugLfDGMhLcfiJopWyyT//MP4s9R34w7j20/BL+zV7aiomcbBpUdmflziW2K1NaU2ykt1U3 uQLgGMqJ0+ls2aes9gZLTzU6+G+dEBNkxGnxnEzglFbve14HqucbZg+dMbpW6QcbTqKinpTTmjo5l nEogYnQHLseIUEwCFYkaHcqQjpp9E/hJgW3nHtIyPOFDbwA4PUz6AaiwtI56MblBRcVyZ3SLEPKHq wAmsXaRAWi3RYE+0KerZKOTH0Qadj4k/HkV4fzxRsVT2FrQLNNmreaqfaXaZMH1jkyxFB2kMo8X5V Dv2kP0KQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w8LDh-00000001P3C-1ty8; Thu, 02 Apr 2026 16:48:37 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?David_Pr=C3=A9vot?= <taffit@debian.org> To: 1131483-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: php-phpseclib Debian: DAK Debian-Changes: php-phpseclib_2.0.42-1+deb12u3_source.changes Debian-Source: php-phpseclib Debian-Version: 2.0.42-1+deb12u3 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1131483: fixed in php-phpseclib 2.0.42-1+deb12u3 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5637623560615842227==" Message-Id: <E1w8LDh-00000001P3C-1ty8@fasolo.debian.org> Date: Thu, 02 Apr 2026 16:48:37 +0000 --===============5637623560615842227== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: php-phpseclib Source-Version: 2.0.42-1+deb12u3 Done: David Pr=C3=A9vot <taffit@debian.org> We believe that the bug you reported is fixed in the latest version of php-phpseclib, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1131483@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. David Pr=C3=A9vot <taffit@debian.org> (supplier of updated php-phpseclib pack= age) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Mar 2026 08:51:03 +0100 Source: php-phpseclib Architecture: source Version: 2.0.42-1+deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Pr=C3=A9vot <taffit@debian.org> Closes: 1131483 Changes: php-phpseclib (2.0.42-1+deb12u3) bookworm-security; urgency=3Dmedium . * make unpadding constant time [CVE-2026-32935] (Closes: #1131483) * X509: fix for weird characters in subjaltname [CVE-2023-52892] Checksums-Sha1: 60b5f44c117478f4f70b78349ad66cbd7e6ede8d 1898 php-phpseclib_2.0.42-1+deb12u3= .dsc 884ad2abad123160b3a8055d14405309149d9c8e 169052 php-phpseclib_2.0.42-1+deb12= u3.debian.tar.xz d2108daf920f37519c3aaa20b31589030219a6c4 8111 php-phpseclib_2.0.42-1+deb12u3= _amd64.buildinfo Checksums-Sha256: 5d631d3bbd14dd91d1ab89c4d3566053093cdfb04bd82f366b3cb8c05e4b80cb 1898 php-ph= pseclib_2.0.42-1+deb12u3.dsc 98101cd00f2264d7ceb8e0fe82e0a9f56bf2d5a1836d8a4dabd96726f451f4c2 169052 php-= phpseclib_2.0.42-1+deb12u3.debian.tar.xz 1911df87413392851f80d613fdcffe5a6321c4b401c20405ee8c17e9bbf8c047 8111 php-ph= pseclib_2.0.42-1+deb12u3_amd64.buildinfo Files: 829f2db9c38ae8115d2629c8f39c0bfd 1898 php optional php-phpseclib_2.0.42-1+de= b12u3.dsc d8828fcb2f8d8526fc18f67085cf6acb 169052 php optional php-phpseclib_2.0.42-1+= deb12u3.debian.tar.xz 4ae0739cad6485fb6b8c53d1cd62bfe3 8111 php optional php-phpseclib_2.0.42-1+de= b12u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnGIPMSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08hWUH/jugLTz/KUsXd71GgNQ9g0VMLQ+EBpvx KG7UvVkyv1AWdkwmokS6zPDp1wDYX71n6GbkNWbImVazbka7FhZVQJ8HYYZBK7wB EZBN8TUBhHZn9aYtQe8GnINHueizLZUfyFhhakx5fZF5f91ztHy3nkQOxj5jNtez AyV46jaKhcI1ppsPWNk891WaYSrL5BvRRN4XNMw52Yej8Ym8zeS3sCgmqE5goxYu u7hwoCM3diA/dEERfBOhEfSbjRP8/FYbiLlMIGkEeW6rgJAsJ6Vw8nI0gB5VkBQJ wBoqakPHVAsOtJ5o3SiqlAOjHGxsEreveMZc43zu42Spyaw4gBbovU0=3D =3DsboL -----END PGP SIGNATURE----- --===============5637623560615842227== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCac6d5QAKCRCb9qggYcy5 IfsyAQCq90xoOeqIc/IHTAEtCXhx5R23qBD0j/kywB9uptqmlAD9FbFfjR9iJQ+9 meVdhfxVzBBAe1A31FGkXHbbRGLVIwk= =yBDl -----END PGP SIGNATURE----- --===============5637623560615842227==-- ]