> Debian DSA-6187-1 php-phpseclib3 Important AES-CBC Padding Oracle Attack

It was discovered that the AES-CBC implementation in the PHP Secure Communications Library was susceptible to a padding oracle timing attack. For the oldstable distribution (bookworm), these problems have been fixed in version 3.0.19-1+deb12u4. This update also fixes CVE-2023-52892. For the stable distribution (trixie), these problems have been fixed in