Loading story…
Debian published security advisories DSA-6185-1 and DSA-6187-1 for the phpseclib and php-phpseclib3 packages, issuing fixes for vulnerabilities in the PHP cryptography libraries. The updates affect both the legacy phpseclib package line and the newer php-phpseclib3 package, indicating that multiple supported branches required remediation.
The advisories provide patched Debian packages through the distribution's security channels so administrators can update affected systems running applications that depend on these libraries. Organizations using PHP-based encryption, SSH, or key-handling functionality through phpseclib should review package exposure and apply the Debian security updates promptly to reduce the risk from flaws in these widely used components.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
Debian published security advisory DSA 6187-1 announcing a security update for the php-phpseclib3 package.
Debian published security advisory DSA 6186-1 announcing a security update for the php-phpseclib package.
Debian published security advisory DSA 6185-1 announcing a security update for the phpseclib package.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
lists.debian.org
Open sourcelists.debian.org
Open sourcelists.debian.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Debian issued security advisories `DSA-6178-1` and `DSA-6179-1` for **Firefox ESR** and **Thunderbird**, releasing updated packages to address unspecified security flaws in the browser and email client. The notices were published through Debian Security Announce and indicate that both widely deployed Mozilla applications received coordinated fixes for vulnerabilities affecting Debian users. The updates highlight continued patching of internet-facing software that commonly processes untrusted web and email content, making both products high-priority targets for exploitation. Organizations running Debian systems should review the relevant advisories, deploy the updated `firefox-esr` and `thunderbird` packages promptly, and verify that endpoints and user workstations are aligned with the latest security releases.
Jun 29, 2026
Debian published two separate security advisories for **ImageMagick**, identified as `DSA-6210-1` and `DSA-6240-1`, indicating repeated security fixes for the widely used image processing suite across supported Debian releases. The advisories were released through Debian's security announcement channel and point to vulnerabilities significant enough to require formal package updates. ImageMagick is commonly embedded in web applications, content management systems, and backend media-processing workflows, making security flaws in the package relevant to servers that automatically handle untrusted image files. Organizations running Debian systems should review both advisories, identify affected releases and package versions, and ensure the latest ImageMagick updates have been applied across exposed or internet-facing workloads.
Jun 29, 2026
Debian published security advisories for **OpenJDK 21** and **OpenJDK 17**, issuing package updates through `DSA-6231-1` and `DSA-6237-1`. The notices indicate that supported Debian systems running Java workloads should receive updated OpenJDK packages to address security flaws in the upstream Java runtime and development kit. The updates affect two widely deployed Java branches used by enterprise applications, middleware, and developer toolchains. Organizations using Debian-based servers, containers, or desktops with `openjdk-17` or `openjdk-21` installed should prioritize patching through normal package-management processes and verify that dependent Java services are restarted after the upgraded packages are applied.
Jun 29, 2026