Control: tags -1 + confirmed On Sat, 2026-05-02 at 09:57 +0200, David Prévot wrote: > Control: retitle -1 trixie-pu: package php-phpseclib3/3.0.43- > 2+deb13u3 > > Hi, > > Le Sun, Apr 19, 2026 at 12:39:04PM +0200, David Prévot a écrit : > […] > > [ This is the first of six similar bug reports, for the php- > > phpseclib3, > > php-phpseclib and phpseclib packages, for both trixie and > > bookworm. ] > > [ #1134373, #1134374, #1134376, #1134378 and #1134379 are the other > bug > reports also affected by the same update. > > > I’d like to get CVE-2026-40194 fixed in an upcoming point release. > > I’d like to also add an additional CVE-2024-27355 workaround as > recently > published upstream (just a max length change for an ID).
Please go ahead. Regards, Adam
