{
  "schema": "csf.release/1",
  "product": "CSF",
  "name": "cPanel Shield Firewall",
  "channel": "stable",
  "version": "2.1.5",
  "released": true,
  "status": "stable",
  "release_date": "2026-08-26",
  "min_upgrade_from": "15.00",
  "download": "https://shield.underhost.com/firewall/download/csf-2.1.5.tar.gz",
  "size_bytes": 266287,
  "checksum": {
    "algorithm": "sha256",
    "value": "951e15e296c0347e9ed9c88ac6379d12c49e708a6db4065f712368c843a93ef8"
  },
  "signature": {
    "algorithm": "minisign",
    "value": null,
    "pubkey_url": null
  },
  "changelog_url": "https://shield.underhost.com/firewall/docs/#changelog",
  "notes": "CSF 2.1.5 - stable. Critical fix: Threat Intelligence updates no longer hang. Large feed sets were fed to nftables over a stdin pipe and could deadlock (the script exceeds the OS pipe buffer), leaving 'csf2 --ti-update' and its 'nft -f' child stuck at 0% CPU; the hourly cron then stacked a new hung pair each hour until the server ran out of resources. nft is now fed via a temp file (no pipe, no deadlock), --ti-update takes a single-instance lock so runs can never stack, and a hard 5-minute timeout bounds every run. Verify the SHA-256 checksum before installing.",
  "generated_at": "2026-08-26T00:00:00Z"
}