Linux · Security advisory · March 29, 2026

DSA-6186-1: php-phpseclib security update

DSA-6186-1, released March 29, 2026, fixes 1 CVE in php-phpseclib. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0040
34th percentile

Fixed package versions

ProductReleaseFixed in
php-phpseclibDebian 12.15 (bookworm)2.0.42-1+deb12u3
php-phpseclibDebian 13.5 (trixie)2.0.48-3+deb13u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2026-32935 php-seclib: phpseclib is a PHP secure communications library 5.9 0.0040 None reported
Showing 1 to 1 of 1 1