Vulnerability Bulletins |
DSA-3029 nginx - security update |
|
| Affected software | Debian |
|
Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that it waspossible to reuse cached SSL sessions in unrelated contexts, allowingvirtual host confusion attacks in some configurations by an attacker ina privileged network position. More info: https://www.debian.org/security/2014/dsa-3029 |
|