Debian/nginx: medium 5.4
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_client on and ssl_ocs
Action: Upgrade nginx to 1.28.3-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.28.3-2 | - |
Fixed versions
| 1.28.3-2 |
Sources
published · modified · JSON