[From nobody Thu Apr 2 18:21:15 2026 Received: (at 1131482-close) by bugs.debian.org; 2 Apr 2026 17:19:32 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 55; hammy, 150; neutral, 126; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:47038) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8Lhc-007kKl-0D for 1131482-close@bugs.debian.org; Thu, 02 Apr 2026 17:19:32 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8Lhb-008N8P-3B for 1131482-close@bugs.debian.org; Thu, 02 Apr 2026 17:19:31 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=13XZPw5FlEfvJTitdSbFKv0BOri5YgNtwJaqodKflgc=; b=ct1eXVkAY7JcL/+IoDJqzqtDEU WNtUGnZUyLPywV9dJzc0U0tkvo4SNOANoC8hYQKPUhcUOgIMincELUDFxaC8mqBr5JcQrmTimUgHX RBN6FNqeWKYh/BXvZm1sDw1rkof7B5s9tX7X1lqiun9N5+pgo/hduFayHju7BisifCnUNHJejVfc6 s82f5fHfnqNwEiZev8gc8v6BvLFwNfi+BikPWefmK4i799bac7nPjupK9lEOg4R/CeAl2zLI6c/5G LUmY2vpbwimzdKnwXyjya/2G8QkaGPeGAPrVUinwNldKUFK9P/qsT0+BUZQDA6gYKodlcHft/oTZH LT+qp6Jw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w8Lhb-00000001THg-0nbD; Thu, 02 Apr 2026 17:19:31 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?David_Pr=C3=A9vot?= <taffit@debian.org> To: 1131482-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: php-phpseclib3 Debian: DAK Debian-Changes: php-phpseclib3_3.0.43-2+deb13u1_source.changes Debian-Source: php-phpseclib3 Debian-Version: 3.0.43-2+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1131482: fixed in php-phpseclib3 3.0.43-2+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1046449951634433725==" Message-Id: <E1w8Lhb-00000001THg-0nbD@fasolo.debian.org> Date: Thu, 02 Apr 2026 17:19:31 +0000 --===============1046449951634433725== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: php-phpseclib3 Source-Version: 3.0.43-2+deb13u1 Done: David Pr=C3=A9vot <taffit@debian.org> We believe that the bug you reported is fixed in the latest version of php-phpseclib3, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1131482@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. David Pr=C3=A9vot <taffit@debian.org> (supplier of updated php-phpseclib3 pac= kage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Mar 2026 08:15:58 +0100 Source: php-phpseclib3 Architecture: source Version: 3.0.43-2+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Pr=C3=A9vot <taffit@debian.org> Closes: 1131482 Changes: php-phpseclib3 (3.0.43-2+deb13u1) trixie-security; urgency=3Dmedium . * make unpadding constant time [CVE-2026-32935] (Closes: #1131482) * Track trixie Checksums-Sha1: 8e16999cbd45f887d724b18c5991ab622b6ea2fe 1873 php-phpseclib3_3.0.43-2+deb13u= 1.dsc f6e3d4d88386488eddb4d09ed6affe077eb3f7f9 572484 php-phpseclib3_3.0.43.orig.t= ar.xz 2d446b8909f7fb0abeddf53f08526c8846fbac01 19272 php-phpseclib3_3.0.43-2+deb13= u1.debian.tar.xz f2651a670c56809db384f18734ddb91816d48cc1 7774 php-phpseclib3_3.0.43-2+deb13u= 1_amd64.buildinfo Checksums-Sha256: 776abb6ecab04242be0c4ffed8e0c6c8f07ce26ef23c3522ffbce003d1663393 1873 php-ph= pseclib3_3.0.43-2+deb13u1.dsc 2bc35d8d6f4d540444b20f2fe05e5d832b2cf8e05dd330bac47ecdc4e6530603 572484 php-= phpseclib3_3.0.43.orig.tar.xz 639e2d448b71f698e40da418e2415b749b67352e4aeef20bf18d8dfaca16f039 19272 php-p= hpseclib3_3.0.43-2+deb13u1.debian.tar.xz 74825c0ae5b1457f14cbdcee9c9fe1cd274f3be9d780bcd0d3ec8cca8d735771 7774 php-ph= pseclib3_3.0.43-2+deb13u1_amd64.buildinfo Files: 7377b2a765f3abddc09f7fbbfc296690 1873 php optional php-phpseclib3_3.0.43-2+d= eb13u1.dsc 4ef6f1861ba07ef2d0e6aace8d5c1998 572484 php optional php-phpseclib3_3.0.43.o= rig.tar.xz f59615e4acdf4fd24f1e3962e1801d32 19272 php optional php-phpseclib3_3.0.43-2+= deb13u1.debian.tar.xz 58ba92a883a7c7f63520777e5421dfcd 7774 php optional php-phpseclib3_3.0.43-2+d= eb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnGIO4SHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r0825cH+gOCUMdDsuH9sH81qb34SsKXRjMz0nv0 78dTV9tLfsNXgdX8iM6J7MuH3W5TM1UaE+z0ZfvM6NJv2IJNZE6SdAaxO6ItAmW5 3JcJDnOoBQ4rKb7J8Ffa3RZhk940uT2726L0I3sC433MBBmtuuFOKDOm7DEii2Ds 4cF1kWnTbWmkbxFCxpRbHof+UYXzLr4V+yMlgyySS+npRgc8ZWEdRwLemaRIpUG4 U0LMT4958FnHUG8pL8zyuWbtczIcCrTOjcEmDNcHUiD/ebZMLQdx69hl14lMfgV2 VkNXRMUGsntG/xVobDgqAkpwzEu/pk5GIfV866lXqRQUW3s3Om4C3yo=3D =3Dtzj0 -----END PGP SIGNATURE----- --===============1046449951634433725== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCac6lIwAKCRCb9qggYcy5 IaIuAP40DbWxKAz1MJQlan1D0WC73hvILoqa09NUW8MOO+z84AD+LUsHDlvr0Hsn /jul9MZerGtEnEjTRw5Ch/bEBFQCWwc= =xo5k -----END PGP SIGNATURE----- --===============1046449951634433725==-- ]