Debian/openssl: medium 5.9
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TL
Action: Upgrade openssl to 1.0.1f-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1f-1 | - |
Fixed versions
| 1.0.1f-1 |
Sources
- osv: DEBIAN-CVE-2015-7575#Debian:14/openssl
- https://security-tracker.debian.org/tracker/CVE-2015-7575
published · modified · JSON