[horde] Horde 6 PR - Blowfish error when viewing sessions

[Ralf Lang]

Hi Nels,

this involved a larger update across three components (sessionhandler,
core, base)
I reproduced your issue and now it should go away.

Thank you for reporting!

On Tue, Apr 14, 2026 at 5:14 PM Nels Lindquist <nlindq at maei.ca> wrote:

> I'm able to trigger a (new) repeatable error while attempting to view
> sessions as an admin:
>
> A fatal error has occurred
> Invalid PKCS#7 padding byte: 0x3F
> in /var/www/html/horde6/vendor/horde/crypt_blowfish/src/Blowfish.php:202
>
> 1. require_once() /var/www/html/horde6/web/horde/admin/sessions.php:3
> 2. Horde_SessionHandler->getSessionsInfo()
> /var/www/html/horde6/vendor/horde/horde/admin/sessions.php:32
> 3. Horde_Core_Factory_SessionHandler->readSessionData()
>
> /var/www/html/horde6/vendor/horde/sessionhandler/lib/Horde/SessionHandler.php:300
> 4. Horde_Registry->getAuthApps()
>
> /var/www/html/horde6/vendor/horde/core/lib/Horde/Core/Factory/SessionHandler.php:149
> 5. Horde_Session->get()
> /var/www/html/horde6/vendor/horde/core/lib/Horde/Registry.php:2897
> 6. Horde_Session->get()
> /var/www/html/horde6/vendor/horde/core/lib/Horde/Session.php:382
> 7. Horde_Secret->read()
> /var/www/html/horde6/vendor/horde/core/lib/Horde/Session.php:365
> 8. Horde\Crypt\Blowfish\Blowfish->decrypt()
> /var/www/html/horde6/vendor/horde/secret/lib/Horde/Secret.php:92
> 9. Horde\Crypt\Blowfish\Blowfish::unpad()
> /var/www/html/horde6/vendor/horde/crypt_blowfish/src/Blowfish.php:113
>
> In case it's relevant, I'm using redis DHT as the session handler, and
> active sessions are being tracked.
>
> --
> Nels Lindquist
> nlindq at maei.ca
>
> --
> Horde mailing list
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: horde-unsubscribe at lists.horde.org
>