GoAhead TLS flaws allow revoked client certificates and may enable session decryption

An affected GoAhead TLS configuration may accept revoked client certificates. Two additional TLS issues may, in specific builds, enable decryption of recorded traffic or allow an over-long certificate chain to be used as an authenticated client. As of October 27, the source reported no known attacks; the affected population has not been established.