Linux · Security advisory · March 30, 2026

DLA-4518-1: phpseclib security update

DLA-4518-1, released March 30, 2026, fixes 1 CVE in phpseclib (version 1.0.19-3+deb11u3). None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0038
31st percentile

Fixed package versions

ProductReleaseFixed in
phpseclibDebian 11.6 (bullseye)1.0.19-3+deb11u3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-52892 php-phpseclib3: In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fie... 7.5 0.0038 None reported
Showing 1 to 1 of 1 1