Maintenance updates We released updated packages for EasyApache 4. This maintenance release introduces ioncube15 as a new package (IonCube 15 with php8.5 beta support), updates Apache mod_qos (11.77 to 11.78), and adds historical CVE refer…
Millie Solem discovered that Authlib did not properly restrict algorithm selection during JWT verification, allowing HMAC verification with asymmetric public keys when no algorithm was specified. A remote attacker could possibly use this i…
Important: * As of August 31, 2025, the developers of CSF no longer maintain or support it. They have released CSF under the <a href="https://www.gnu.org/licenses/gpl-3.0.en.html" target="_blank">GPLv3 license. *…
Eliot Horowitz discovered that MongoDB may fail to validate some instances of malformed BSON. A remote attacker could possibly use this issue to cause MongoDB to crash, resulting in a denial of service. This issue only affected Ubuntu 14.0…