Apache Update: TLS Certificate Authentication Bypass with HTTP/2 (CVE-2016-4979)

July 6, 2016

Apache released an important update today to fix a vulnerability that affects servers that have http/2 enabled and use TLS client certificates for authentication.