product attestations

CVE‑2024‑2511 exposed a surprising — and at first glance narrowly scoped — weakness in OpenSSL’s TLSv1.3 session handling: certain non‑default server configurations can cause the session cache to stop flushing and grow without bound, allowing a remote actor to force resource exhaustion and a...