Tag: tls session forgery

NGINX Disrupts Multiple Flaws, Including Possible RCE and TLS Session Forgery

NGINX just dropped a critical update to squash five vulnerabilities, including a long-standing flaw dating back to May 2005 that could lead to code execution or crashes in certain configurations. The patches fix memory bugs, a TLS session-ticket weakness, and an HTTP/3 parser issue that could put your system at risk.