# simplesamlphp security updates

Patch Radar has 13 security fixes for simplesamlphp, closing 5 CVEs. The newest is DEBIAN-CVE-2026-49284 (2.4.8-1), released July 17, 2026.

- Web page: https://patchblox.com/security/product/linux/simplesamlphp
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-49284](https://patchblox.com/security/data/fix/linux/debian-cve-2026-49284.md) | Jul 17, 2026 | Debian 14 2.4.8-1 | High | 1 | 0 |
| [DLA-4161-1](https://patchblox.com/security/data/fix/linux/dla-4161-1.md) | May 9, 2025 | Debian 11.6 (bullseye) 1.19.0-1+deb11u2 | High | 1 | 0 |
| [DEBIAN-CVE-2025-27773](https://patchblox.com/security/data/fix/linux/debian-cve-2025-27773.md) | Mar 11, 2025 | Debian 12.15 (bookworm) 1.19.7-1+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2025-27773](https://patchblox.com/security/data/fix/linux/debian-cve-2025-27773.md) | Mar 11, 2025 | Debian 14 1.19.7-2 | High | 1 | 0 |
| [simplesamlphp 1.15.3-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-simplesamlphp-1.15.3-1ubuntu0.1-esm1.md) | Mar 11, 2025 | Ubuntu 18.04.6 LTS (bionic) 1.15.3-1ubuntu0.1~esm1 | High | 3 | 0 |
| [simplesamlphp 1.18.4-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-simplesamlphp-1.18.4-1ubuntu0.1-esm1.md) | Mar 11, 2025 | Ubuntu 20.04 LTS (focal) 1.18.4-1ubuntu0.1~esm1 | High | 2 | 0 |
| [simplesamlphp 1.19.1-1.1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-simplesamlphp-1.19.1-1.1ubuntu0.1-esm1.md) | Mar 11, 2025 | Ubuntu 22.04.1 LTS (jammy) 1.19.1-1.1ubuntu0.1~esm1 | High | 2 | 0 |
| [simplesamlphp 1.19.7-1+deb12u1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-simplesamlphp-1.19.7-1-deb12u1ubuntu0.1.md) | Mar 11, 2025 | Ubuntu 24.04.5 LTS (noble) 1.19.7-1+deb12u1ubuntu0.1 | High | 2 | 0 |
| [DEBIAN-CVE-2024-52806](https://patchblox.com/security/data/fix/linux/debian-cve-2024-52806.md) | Dec 2, 2024 | Debian 12.15 (bookworm) 1.19.7-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-52806](https://patchblox.com/security/data/fix/linux/debian-cve-2024-52806.md) | Dec 2, 2024 | Debian 14 1.19.7-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-52596](https://patchblox.com/security/data/fix/linux/debian-cve-2024-52596.md) | Dec 2, 2024 | Debian 14 1.19.7-1+deb12u1 | Routine | 1 | 0 |
| [DLA-3981-1](https://patchblox.com/security/data/fix/linux/dla-3981-1.md) | Dec 2, 2024 | Debian 11.6 (bullseye) 1.19.0-1+deb11u1 | Routine | 1 | 0 |
| [DSA-5822-1](https://patchblox.com/security/data/fix/linux/dsa-5822-1.md) | Dec 2, 2024 | Debian 12.15 (bookworm) 1.19.7-1+deb12u1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo