# php-phpseclib security updates

Patch Radar has 30 security fixes for php-phpseclib, closing 9 CVEs. The newest is DEBIAN-CVE-2026-55599 (2.0.55-1), released June 24, 2026.

- Web page: https://patchblox.com/security/product/linux/php-phpseclib
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-55599](https://patchblox.com/security/data/fix/linux/debian-cve-2026-55599.md) | Jun 24, 2026 | Debian 14 2.0.55-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-44167](https://patchblox.com/security/data/fix/linux/debian-cve-2026-44167.md) | May 27, 2026 | Debian 12.15 (bookworm) 2.0.42-1+deb12u5 | High | 1 | 0 |
| [DEBIAN-CVE-2026-44167](https://patchblox.com/security/data/fix/linux/debian-cve-2026-44167.md) | May 27, 2026 | Debian 13.5 (trixie) 2.0.48-3+deb13u3 | High | 1 | 0 |
| [DEBIAN-CVE-2026-44167](https://patchblox.com/security/data/fix/linux/debian-cve-2026-44167.md) | May 27, 2026 | Debian 14 2.0.54-1 | High | 1 | 0 |
| [php-phpseclib 2.0.23-2ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-php-phpseclib-2.0.23-2ubuntu0.1-esm3.md) | May 12, 2026 | Ubuntu 20.04 LTS (focal) 2.0.23-2ubuntu0.1~esm3 | High | 3 | 0 |
| [php-phpseclib 2.0.36-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-php-phpseclib-2.0.36-1ubuntu0.1-esm3.md) | May 12, 2026 | Ubuntu 22.04.1 LTS (jammy) 2.0.36-1ubuntu0.1~esm3 | High | 3 | 0 |
| [php-phpseclib 2.0.47-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-php-phpseclib-2.0.47-1ubuntu0.1-esm1.md) | May 12, 2026 | Ubuntu 24.04.5 LTS (noble) 2.0.47-1ubuntu0.1~esm1 | High | 3 | 0 |
| [php-phpseclib 2.0.9-1ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php-phpseclib-2.0.9-1ubuntu0.1-esm3.md) | May 12, 2026 | Ubuntu 18.04.6 LTS (bionic) 2.0.9-1ubuntu0.1~esm3 | High | 3 | 0 |
| [DEBIAN-CVE-2026-40194](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40194.md) | Apr 10, 2026 | Debian 12.15 (bookworm) 2.0.42-1+deb12u4 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-40194](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40194.md) | Apr 10, 2026 | Debian 13.5 (trixie) 2.0.48-3+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-40194](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40194.md) | Apr 10, 2026 | Debian 14 2.0.53-1 | Routine | 1 | 0 |
| [DSA-6186-1](https://patchblox.com/security/data/fix/linux/dsa-6186-1.md) | Mar 29, 2026 | Debian 12.15 (bookworm) 2.0.42-1+deb12u3 | Routine | 1 | 0 |
| [DSA-6186-1](https://patchblox.com/security/data/fix/linux/dsa-6186-1.md) | Mar 29, 2026 | Debian 13.5 (trixie) 2.0.48-3+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-32935](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32935.md) | Mar 20, 2026 | Debian 14 2.0.52-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-52892](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52892.md) | Jun 27, 2024 | Debian 13.5 (trixie) 2.0.46-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-52892](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52892.md) | Jun 27, 2024 | Debian 12.15 (bookworm) 2.0.42-1+deb12u3 | High | 1 | 0 |
| [DEBIAN-CVE-2023-52892](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52892.md) | Jun 27, 2024 | Debian 14 2.0.46-1 | High | 1 | 0 |
| [php-phpseclib 2.0.23-2ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-php-phpseclib-2.0.23-2ubuntu0.1-esm2.md) | Jun 27, 2024 | Ubuntu 20.04 LTS (focal) 2.0.23-2ubuntu0.1~esm2 | High | 4 | 0 |
| [php-phpseclib 2.0.36-1ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-php-phpseclib-2.0.36-1ubuntu0.1-esm2.md) | Jun 27, 2024 | Ubuntu 22.04.1 LTS (jammy) 2.0.36-1ubuntu0.1~esm2 | High | 3 | 0 |
| [php-phpseclib 2.0.9-1ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php-phpseclib-2.0.9-1ubuntu0.1-esm2.md) | Jun 27, 2024 | Ubuntu 18.04.6 LTS (bionic) 2.0.9-1ubuntu0.1~esm2 | High | 2 | 0 |
| [DEBIAN-CVE-2024-27354](https://patchblox.com/security/data/fix/linux/debian-cve-2024-27354.md) | Mar 1, 2024 | Debian 12.15 (bookworm) 2.0.42-1+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2024-27354](https://patchblox.com/security/data/fix/linux/debian-cve-2024-27354.md) | Mar 1, 2024 | Debian 13.5 (trixie) 2.0.47-1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-27354](https://patchblox.com/security/data/fix/linux/debian-cve-2024-27354.md) | Mar 1, 2024 | Debian 14 2.0.47-1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-27355](https://patchblox.com/security/data/fix/linux/debian-cve-2024-27355.md) | Mar 1, 2024 | Debian 12.15 (bookworm) 2.0.42-1+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2024-27355](https://patchblox.com/security/data/fix/linux/debian-cve-2024-27355.md) | Mar 1, 2024 | Debian 13.5 (trixie) 2.0.47-1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-27355](https://patchblox.com/security/data/fix/linux/debian-cve-2024-27355.md) | Mar 1, 2024 | Debian 14 2.0.47-1 | High | 1 | 0 |
| [DSA-5600-1](https://patchblox.com/security/data/fix/linux/dsa-5600-1.md) | Jan 12, 2024 | Debian 11.6 (bullseye) 2.0.30-2+deb11u1 | Routine | 1 | 0 |
| [DSA-5600-1](https://patchblox.com/security/data/fix/linux/dsa-5600-1.md) | Jan 12, 2024 | Debian 12.15 (bookworm) 2.0.42-1+deb12u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-48795](https://patchblox.com/security/data/fix/linux/debian-cve-2023-48795.md) | Dec 18, 2023 | Debian 13.5 (trixie) 2.0.46-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-48795](https://patchblox.com/security/data/fix/linux/debian-cve-2023-48795.md) | Dec 18, 2023 | Debian 14 2.0.46-1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
