# composer security updates Patch Radar has 43 security fixes for composer, closing 16 CVEs. The newest is DEBIAN-CVE-2026-84361 (2.10.3-1), released September 3, 2026. - Web page: https://patchblox.com/security/product/linux/composer - Platform: Linux - Supported: yes ## Security fixes, newest first | Fix | Released | Fixed in | Priority | CVEs | Exploited | |---|---|---|---|---:|---:| | [DEBIAN-CVE-2026-84361](https://patchblox.com/security/data/fix/linux/debian-cve-2026-84361.md) | Sep 3, 2026 | Debian 14 2.10.3-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-59944](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59944.md) | Sep 2, 2026 | Debian 14 2.10.3-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-59948](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59948.md) | Jul 9, 2026 | Debian 14 2.10.2-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-59946](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59946.md) | Jul 9, 2026 | Debian 14 2.10.2-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-59947](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59947.md) | Jul 9, 2026 | Debian 14 2.10.2-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-45793](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45793.md) | May 15, 2026 | Debian 12.15 (bookworm) 2.5.5-1+deb12u5 | High | 1 | 0 | | [DEBIAN-CVE-2026-45793](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45793.md) | May 15, 2026 | Debian 13.5 (trixie) 2.8.8-1+deb13u3 | High | 1 | 0 | | [DEBIAN-CVE-2026-45793](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45793.md) | May 15, 2026 | Debian 14 2.10.0-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-40261](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40261.md) | Apr 15, 2026 | Debian 12.15 (bookworm) 2.5.5-1+deb12u4 | High | 1 | 0 | | [DEBIAN-CVE-2026-40261](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40261.md) | Apr 15, 2026 | Debian 13.5 (trixie) 2.8.8-1+deb13u2 | High | 1 | 0 | | [DEBIAN-CVE-2026-40261](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40261.md) | Apr 15, 2026 | Debian 14 2.9.7-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-40176](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40176.md) | Apr 15, 2026 | Debian 12.15 (bookworm) 2.5.5-1+deb12u4 | High | 1 | 0 | | [DEBIAN-CVE-2026-40176](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40176.md) | Apr 15, 2026 | Debian 13.5 (trixie) 2.8.8-1+deb13u2 | High | 1 | 0 | | [DEBIAN-CVE-2026-40176](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40176.md) | Apr 15, 2026 | Debian 14 2.9.7-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-67746](https://patchblox.com/security/data/fix/linux/debian-cve-2025-67746.md) | Dec 30, 2025 | Debian 12.15 (bookworm) 2.5.5-1+deb12u3 | Routine | 1 | 0 | | [DEBIAN-CVE-2025-67746](https://patchblox.com/security/data/fix/linux/debian-cve-2025-67746.md) | Dec 30, 2025 | Debian 13.5 (trixie) 2.8.8-1+deb13u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2025-67746](https://patchblox.com/security/data/fix/linux/debian-cve-2025-67746.md) | Dec 30, 2025 | Debian 14 2.9.3-1 | Routine | 1 | 0 | | [DSA-5715-1](https://patchblox.com/security/data/fix/linux/dsa-5715-1.md) | Jun 18, 2024 | Debian 12.15 (bookworm) 2.5.5-1+deb12u2 | High | 1 | 0 | | [DSA-5715-1](https://patchblox.com/security/data/fix/linux/dsa-5715-1.md) | Jun 18, 2024 | Debian 11.6 (bullseye) 2.0.9-2+deb11u3 | High | 1 | 0 | | [DEBIAN-CVE-2024-35242](https://patchblox.com/security/data/fix/linux/debian-cve-2024-35242.md) | Jun 10, 2024 | Debian 12.15 (bookworm) 2.5.5-1+deb12u2 | High | 1 | 0 | | [DEBIAN-CVE-2024-35242](https://patchblox.com/security/data/fix/linux/debian-cve-2024-35242.md) | Jun 10, 2024 | Debian 13.5 (trixie) 2.7.7-1 | High | 1 | 0 | | [DEBIAN-CVE-2024-35242](https://patchblox.com/security/data/fix/linux/debian-cve-2024-35242.md) | Jun 10, 2024 | Debian 14 2.7.7-1 | High | 1 | 0 | | [DEBIAN-CVE-2024-35241](https://patchblox.com/security/data/fix/linux/debian-cve-2024-35241.md) | Jun 10, 2024 | Debian 13.5 (trixie) 2.7.7-1 | High | 1 | 0 | | [DEBIAN-CVE-2024-35241](https://patchblox.com/security/data/fix/linux/debian-cve-2024-35241.md) | Jun 10, 2024 | Debian 14 2.7.7-1 | High | 1 | 0 | | [composer 2.2.6-2ubuntu4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-composer-2.2.6-2ubuntu4-esm1.md) | Jun 10, 2024 | Ubuntu 22.04.1 LTS (jammy) 2.2.6-2ubuntu4+esm1 | High | 5 | 0 | | [composer 1.10.1-1ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-composer-1.10.1-1ubuntu0.1-esm2.md) | Jun 10, 2024 | Ubuntu 20.04 LTS (focal) 1.10.1-1ubuntu0.1~esm2 | High | 4 | 0 | | [composer 1.6.3-1ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-composer-1.6.3-1ubuntu0.1-esm2.md) | Jun 10, 2024 | Ubuntu 18.04.6 LTS (bionic) 1.6.3-1ubuntu0.1~esm2 | High | 4 | 0 | | [composer 2.7.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-composer-2.7.1-2ubuntu0.1-esm1.md) | Jun 10, 2024 | Ubuntu 24.04.5 LTS (noble) 2.7.1-2ubuntu0.1~esm1 | High | 2 | 0 | | [DSA-5632-1](https://patchblox.com/security/data/fix/linux/dsa-5632-1.md) | Feb 26, 2024 | Debian 11.6 (bullseye) 2.0.9-2+deb11u2 | High | 1 | 0 | | [DSA-5632-1](https://patchblox.com/security/data/fix/linux/dsa-5632-1.md) | Feb 26, 2024 | Debian 12.15 (bookworm) 2.5.5-1+deb12u1 | High | 1 | 0 | | [DEBIAN-CVE-2024-24821](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24821.md) | Feb 9, 2024 | Debian 13.5 (trixie) 2.7.1-1 | High | 1 | 0 | | [DEBIAN-CVE-2024-24821](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24821.md) | Feb 9, 2024 | Debian 14 2.7.1-1 | High | 1 | 0 | | [DEBIAN-CVE-2023-43655](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43655.md) | Sep 29, 2023 | Debian 14 2.6.4-1 | High | 1 | 0 | | [DEBIAN-CVE-2023-43655](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43655.md) | Sep 29, 2023 | Debian 12.15 (bookworm) 2.5.5-1+deb12u4 | High | 1 | 0 | | [DEBIAN-CVE-2023-43655](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43655.md) | Sep 29, 2023 | Debian 13.5 (trixie) 2.6.4-1 | High | 1 | 0 | | [DEBIAN-CVE-2015-8371](https://patchblox.com/security/data/fix/linux/debian-cve-2015-8371.md) | Sep 21, 2023 | Debian 12.15 (bookworm) 1.0.0~alpha11-3 | High | 1 | 0 | | [DEBIAN-CVE-2015-8371](https://patchblox.com/security/data/fix/linux/debian-cve-2015-8371.md) | Sep 21, 2023 | Debian 13.5 (trixie) 1.0.0~alpha11-3 | High | 1 | 0 | | [DEBIAN-CVE-2015-8371](https://patchblox.com/security/data/fix/linux/debian-cve-2015-8371.md) | Sep 21, 2023 | Debian 14 1.0.0~alpha11-3 | High | 1 | 0 | | [DEBIAN-CVE-2022-24828](https://patchblox.com/security/data/fix/linux/debian-cve-2022-24828.md) | Apr 13, 2022 | Debian 12.15 (bookworm) 2.2.12-1 | High | 1 | 0 | | [DEBIAN-CVE-2022-24828](https://patchblox.com/security/data/fix/linux/debian-cve-2022-24828.md) | Apr 13, 2022 | Debian 13.5 (trixie) 2.2.12-1 | High | 1 | 0 | | [DEBIAN-CVE-2022-24828](https://patchblox.com/security/data/fix/linux/debian-cve-2022-24828.md) | Apr 13, 2022 | Debian 14 2.2.12-1 | High | 1 | 0 | | [composer 1.10.1-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-composer-1.10.1-1ubuntu0.1-esm1.md) | Apr 27, 2021 | Ubuntu 20.04 LTS (focal) 1.10.1-1ubuntu0.1~esm1 | Routine | 1 | 0 | | [composer 1.6.3-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-composer-1.6.3-1ubuntu0.1-esm1.md) | Apr 27, 2021 | Ubuntu 18.04.6 LTS (bionic) 1.6.3-1ubuntu0.1~esm1 | Routine | 1 | 0 | --- Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo