diff --git a/.gitignore b/.gitignore
index 248dad8..6ba8039 100644
--- a/.gitignore
+++ b/.gitignore
@@ -43,3 +43,4 @@ clog
 /php-phpseclib-2.0.43-87b6bb4.tgz
 /php-phpseclib-2.0.44-149f608.tgz
 /php-phpseclib-2.0.48-eaa7be7.tgz
+/php-phpseclib-2.0.49-4de468f.tgz
diff --git a/makesrc.sh b/makesrc.sh
index 816b3f7..6e6d643 100755
--- a/makesrc.sh
+++ b/makesrc.sh
@@ -11,11 +11,10 @@ echo -e "\nCreate git snapshot\nName=$NAME, Owner=$OWNER, Project=$PROJECT, Vers
 
 echo "Cloning..."
 rm -rf $PROJECT-$COMMIT
-git clone https://github.com/$OWNER/$PROJECT.git $PROJECT-$COMMIT
+git clone --revision "${COMMIT}" --depth 1 https://github.com/$OWNER/$PROJECT.git $PROJECT-$COMMIT
 
-echo "Getting commit..."
+echo "Saving a copy of composer.json..."
 pushd $PROJECT-$COMMIT
-git checkout $COMMIT
 cp composer.json ../composer-$VERSION.json
 popd
 
diff --git a/php-phpseclib.spec b/php-phpseclib.spec
index 27dbe3e..c4b3fe9 100644
--- a/php-phpseclib.spec
+++ b/php-phpseclib.spec
@@ -3,13 +3,13 @@
 
 %global github_owner            phpseclib
 %global github_name             phpseclib
-%global github_commit           eaa7be704b8b93a6913b69eb7f645a59d7731b61
+%global github_commit           4de468f48f0ab9709fc875aca0762abdc81cfa9b
 %global github_short            %(c=%{github_commit}; echo ${c:0:7})
 %bcond_without                  tests
 
 Name:       php-%{composer_vendor}
-Version:    2.0.48
-Release:    2%{?dist}
+Version:    2.0.49
+Release:    1%{?dist}
 Summary:    PHP Secure Communications Library
 License:    MIT
 URL:        https://github.com/%{github_owner}/%{github_name}
@@ -131,6 +131,9 @@ exit $ret
 
 
 %changelog
+* Mon Oct 06 2025 Artur Frenszek-Iwicki <fedora@svgames.pl> - 2.0.49-1
+- Update to v2.0.49
+
 * Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.48-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
 
diff --git a/sources b/sources
index d3b1399..c825898 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (php-phpseclib-2.0.48-eaa7be7.tgz) = 4dacaebfe2041bf0326a9eb3a8fab6995861d76c07093f540f82b4b7f9357fb5a9a10a64bcaab277937d1d7583c1e91a2afaab0285f53d5a448d44378f18c35a
+SHA512 (php-phpseclib-2.0.49-4de468f.tgz) = 1f3602066cb9cc2bb1d726a514c3abfd1b34b7d034baa88a1ae0a921699096cc6a6a9113775159144edf6d98beeeeddfb970ae2ae5b1e24c8a10ea542f9766da