qs could be made to crash if it received specially crafted network traffic.
Comment
Changes in v1.4.13: server: Cover edge-case in the EventFilter validation client: Cover edge-case in the UserTokenPolicy validation arch: Process delayed callbacks immediately via the nextCyclicTime plugins: Fixed memleak for scandir in OpenSSL SecurityPolicies
Changes in v1.4.13: server: Cover edge-case in the EventFilter validation client: Cover edge-case in the UserTokenPolicy validation arch: Process delayed callbacks immediately via the nextCyclicTime plugins: Fixed memleak for scandir in OpenSSL SecurityPolicies
2.1900 [Fixed] – CVE-2025-40918 (Insecure source of randomness), required addition of dependency on Crypt::URandom [Changed] – Modules Authen::SASL::Perl::CRAM_MD5, Authen::SASL::Perl::DIGEST_MD5 and Authen::SASL::CRAM_MD5 marked as deprecated based on the respective RFC
USN-6885-1 introduced a regression in Apache HTTP Server.