Back Linuxsecurity

Fedora 43 php-phpseclib Denial of Service Mitigation CVE-2026

Linuxsecurity •LinuxSecurity Advisories • August 18, 2026

Share: View original

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

MIT-licensed pure-PHP implementations of an arbitrary-precision integer

arithmetic library, fully PKCS#1 (v2.1) compliant RSA, DES, 3DES, RC4,

Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509

Update to v2.0.55 - contains fix for CVE-2026-44167

* Sun Aug 9 2026 Artur Frenszek-Iwicki - 2.0.55-1 - Update to v2.0.55

[ 1 ] Bug #2476731 - CVE-2026-44167 php-phpseclib: phpseclib: Denial of Service via untrusted ASN.1 file loading [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b2ce3f8e3e' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Denial of Service Vulnerability in phpseclib Affects Fedora Users A denial of service vulnerability (CVE-2026-44167) has been identified in the phpseclib library used in Fedora systems. The flaw allows attackers to exploit untrusted ASN.1 file loading, potentially leading to service disruption. Fedora versions 43 and 44 are affected, prompting an urgent update to version 2.0.55, released on August 9, 2026. The vulnerability was published on May 12, 2026, and has been linked to bug report #2476731. Users are advised to upgrade their systems using the 'dnf' update program to mitigate the risk. The issue highlights the importance of auditing Linux privileges to prevent escalation and system-wide damage. No active exploitation has been reported as of the latest updates. 4 sources 58

Extracted Entities

Fedora 43 php-phpseclib Denial of Service Mitigation CVE-2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)