[Secure-testing-team] Bug#761940: nginx:CVE-2014-3616: possible to reuse cached SSL sessions in unrelated contexts

[Salvatore Bonaccorso]

Source: nginx
Version: 0.7.67-3
Severity: grave
Tags: security upstream patch fixed-upstream

Hi,

the following vulnerability was published for nginx.

CVE-2014-3616[0]:
reuse cached SSL sessions in unrelated contexts

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-3616
[1] http://mailman.nginx.org/pipermail/nginx-announce/2014/000147.html

Regards,
Salvatore