Scalable Stories

Technical Briefing: CVE-2026-80668, a Netfilter Conntrack Use-After-Free, and the Fixed Kernel for CentOS 7 Today's source is a GetPageSpeed article on CVE-2026-80668, a use-after-free in Linux netfilter conntrack expectation handling. It covers which CentOS 7 kernels are affected, how to install the fixed Everpatch Kernel kernel-lt 6.18.62-2.el7, how to judge exposure, and a stopgap for servers that cannot reboot yet. Earlier briefings covered PHP on CentOS 7 and CentOS 6 and the Brotli flaw,…

Technical Briefing: Extended PHP Support for CentOS 7 (Remi Drop-in Replacement) Today's source is a GetPageSpeed article on in-place PHP security updates for CentOS 7 servers that run Remi PHP packages. Earlier briefings covered the PHP2Shell vulnerabilities and the CentOS 6 builds, so this briefing does not re-explain them. It focuses on the CentOS 7 situation. Commands, versions and caveats are as stated in the article. The Problem Remi stopped building for EL7, and nothing signalled it Remi…

Technical Briefing: CVE-2026-111497 (Brotli Decoder Flaw), Fixes by Distro and NGINX Impact Today's source is a new GetPageSpeed article on CVE-2026-111497, an out-of-bounds write in Google Brotli's decoder. It explains which distributions ship fixes, how to patch servers stranded on end-of-life platforms (CentOS 7, Amazon Linux 2, older Debian/Ubuntu), and which NGINX packages are actually exposed. Commands, versions and caveats are as stated in the article. The Problem The vulnerability | Ite…

Technical Briefing: Automatic WebP/AVIF Conversion in NGINX with ngximmerse Today's source is a GetPageSpeed article about ngximmerse, an NGINX filter module. When the browser supports WebP or AVIF, the module converts JPEG, PNG and GIF responses on the fly and caches the result. The article covers the problem, how the module works, installation, configuration, testing, performance tuning, security, failure handling and troubleshooting. The Problem: Modern Image Formats Are Hard to Deploy Image…

Technical Briefing: Patched PHP 5.6–8.4 for CentOS 7 Against PHP2Shell Today's source is a GetPageSpeed article about PHP2Shell on CentOS 7. A recent briefing covered GetPageSpeed's free patched PHP 7.4 for Ubuntu 20.04. This article covers the CentOS 7 side, which is broader: GetPageSpeed now publishes patched builds for every PHP branch from 5.6 through 8.4. They are distributed as per-version channels for base-name packages and as software collections, and they install in place over Remi pac…

A dedicated GetPageSpeed special on PHP2Shell and closing the gap between a security fix and an installable package.

Technical Briefing: Free Patched PHP 7.4 for Ubuntu 20.04 Against PHP2Shell Today's source is a GetPageSpeed article about a gap left by PHP2Shell, a pair of critical remote code execution flaws in PHP. On Ubuntu 20.04 (focal), the official fix is available only to Ubuntu Pro subscribers, and the sury PPA no longer builds for focal. GetPageSpeed's existing extras repository now carries a free rebuilt php7.4 package that fixes both CVEs and upgrades existing installs in place. The article covers…

Technical Briefing: Amplify Adds a Hosted, Read-Only MCP Server for NGINX Monitoring Data Today's source is a GetPageSpeed article on a new capability in Amplify, GetPageSpeed's existing NGINX monitoring service. Amplify now offers a hosted MCP (Model Context Protocol) server, so AI coding agents can query monitoring and security data directly instead of relying on a human to copy it from the dashboard. The article covers how the server works, its 14 tools, setup for several clients, real-world…

Technical Briefing: Rendering XML as HTML at the Edge with NGINX's XSLT Filter Module Today's source is a GetPageSpeed article on ngxhttpxsltfiltermodule, an established NGINX module rather than a new release. It applies XSLT stylesheets at the web-server layer, so a backend can keep returning XML while NGINX returns HTML to clients. The article covers how the filter works, installation, all six directives, practical configurations, testing, performance, security, troubleshooting, and when the…

Technical Briefing: Safe JSONP in NGINX with ngxhttpxssmodule Today's source is a GetPageSpeed article on ngxhttpxssmodule, an established NGINX module from the xss-nginx-module project. The module generates JSONP responses and validates the callback name before sending any data. The article covers when JSONP is still needed, how the module decides whether to wrap a response, a hardened configuration, verification steps, and troubleshooting. The Problem: When CORS Isn't an Option CORS is the mo…