[horde] Horde 6 PR - Blowfish error when viewing sessions

Nels Lindquist nlindq at maei.ca
Tue Apr 14 15:14:07 UTC 2026


I'm able to trigger a (new) repeatable error while attempting to view 
sessions as an admin:

A fatal error has occurred
Invalid PKCS#7 padding byte: 0x3F
in /var/www/html/horde6/vendor/horde/crypt_blowfish/src/Blowfish.php:202

1. require_once() /var/www/html/horde6/web/horde/admin/sessions.php:3
2. Horde_SessionHandler->getSessionsInfo() 
/var/www/html/horde6/vendor/horde/horde/admin/sessions.php:32
3. Horde_Core_Factory_SessionHandler->readSessionData() 
/var/www/html/horde6/vendor/horde/sessionhandler/lib/Horde/SessionHandler.php:300
4. Horde_Registry->getAuthApps() 
/var/www/html/horde6/vendor/horde/core/lib/Horde/Core/Factory/SessionHandler.php:149
5. Horde_Session->get() 
/var/www/html/horde6/vendor/horde/core/lib/Horde/Registry.php:2897
6. Horde_Session->get() 
/var/www/html/horde6/vendor/horde/core/lib/Horde/Session.php:382
7. Horde_Secret->read() 
/var/www/html/horde6/vendor/horde/core/lib/Horde/Session.php:365
8. Horde\Crypt\Blowfish\Blowfish->decrypt() 
/var/www/html/horde6/vendor/horde/secret/lib/Horde/Secret.php:92
9. Horde\Crypt\Blowfish\Blowfish::unpad() 
/var/www/html/horde6/vendor/horde/crypt_blowfish/src/Blowfish.php:113

In case it's relevant, I'm using redis DHT as the session handler, and 
active sessions are being tracked.

-- 
Nels Lindquist
nlindq at maei.ca



More information about the horde mailing list