Hi, It seems that CVE-2015-7849 and CVE-2015-7854 is the same issue, it's at least the same patch that fixes it. But is seems the "secret" is not present in 4.2.6. Does that mean that 4.2.6 isn't affected? Kurt