https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T06:29:45.885284+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-32935 UBUNTU-CVE-2026-32935 2026-09-30T06:29:45.888817+00:00

Affected: Ubuntu:Pro:16.04:LTS: php-phpseclib, Ubuntu:Pro:18.04:LTS: php-phpseclib, Ubuntu:Pro:18.04:LTS: phpseclib, Ubuntu:Pro:20.04:LTS: php-phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib3, Ubuntu:24.04:LTS: php-phpseclib3, Ubuntu:Pro:24.04:LTS: php-phpseclib, Ubuntu:Pro:24.04:LTS: phpseclib and 6 more

phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.