Synopsis
| Issued | 2025-02-12 |
| Severity | Awaiting Analysis |
| Updated Packages | kusanagi-nginx126 |
| Affected Products | KUSANAGI 9 |
Description
An update for kusanagi-nginx126 is now available.
Security fix(es):
- Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different virtual server, to bypass client SSL certificates verification (CVE-2025-23419).
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE information may not yet be available on those websites.
