Debian/tomcat-native: high 7.4
When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identi
Action: Upgrade tomcat-native to 1.2.17-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.17-1 | - |
Fixed versions
| 1.2.17-1 |
Sources
published · modified · JSON