Apache mod_session_crypto versions 2.3 through 2.5 suffer form a padding oracle vulnerability. Continue reading...