Description
In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incorrectly allowed to have a special meaning in regular expressions (such as a + wildcard), leading to name confusion in X.509 certificate host verification.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | php-phpseclib | 2.0.46-1 | — |
| Debian 14 | php-phpseclib3 | 3.0.33-1 | — |
| Debian 13 | php-phpseclib | 2.0.46-1 | — |
| Debian 13 | php-phpseclib3 | 3.0.33-1 | — |
| Debian 13 | phpseclib | 1.0.22-1 | — |
| Debian 12 | php-phpseclib | 2.0.42-1+deb12u3 | — |
| Debian 12 | php-phpseclib3 | 3.0.19-1+deb12u4 | — |
| Debian 12 | phpseclib | 1.0.20-1+deb12u3 | — |
| Debian 11 | phpseclib | 1.0.19-3+deb11u3 | DLA-4518-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | phpseclib | 1.0.20-1+deb12u3build0.22.04.1 | USN-8769-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 26.04 LTS | phpseclib | 1.0.24-1ubuntu0.1~esm1 | USN-8769-1 |
| Ubuntu Pro 24.04 LTS | phpseclib | 1.0.23-1ubuntu0.1~esm1 | USN-8769-1 |
| Ubuntu Pro 22.04 LTS | php-phpseclib | 2.0.36-1ubuntu0.1~esm2 | USN-7404-1 |
| Ubuntu Pro 22.04 LTS | php-phpseclib3 | 3.0.13-1ubuntu0.1~esm1 | USN-7404-1 |
| Ubuntu Pro 22.04 LTS | phpseclib | 1.0.20-1ubuntu0.1~esm1 | USN-7404-1 |
| Ubuntu Pro 20.04 LTS | php-phpseclib | 2.0.23-2ubuntu0.1~esm2 | USN-7404-1 |
| Ubuntu Pro 20.04 LTS | phpseclib | 1.0.18-2ubuntu0.1~esm1 | USN-8769-1, USN-7404-1 |
| Ubuntu Pro 18.04 LTS | php-phpseclib | 2.0.9-1ubuntu0.1~esm2 | USN-7404-1 |
| Ubuntu Pro 18.04 LTS | phpseclib | 1.0.9-1ubuntu0.1~esm1 | USN-8769-1, USN-7404-1 |
| Ubuntu Pro 16.04 LTS | php-phpseclib | 2.0.1-1ubuntu0.1~esm2 | USN-7404-1 |
| Ubuntu Pro 16.04 LTS | phpseclib | 1.0.1-3ubuntu0.1+esm1 | USN-8769-1, USN-7404-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpseclib/phpseclib | < 1.0.22 | 1.0.22 | GHSA-ff7q-6vwh-v9m4 |
| Packagist | phpseclib/phpseclib | >= 2.0.0, < 2.0.46 | 2.0.46 | GHSA-ff7q-6vwh-v9m4 |
| Packagist | phpseclib/phpseclib | >= 3.0.0, < 3.0.33 | 3.0.33 | GHSA-ff7q-6vwh-v9m4 |
Advisories 3
- USN-8769-1 phpseclib vulnerability Ubuntu Security Notices (USN) · Sep 16, 2026
- USN-7404-1 phpseclib vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- DLA-4518-1 phpseclib - security update Debian Security (DSA / DLA) · Mar 30, 2026