{"action":"Upgrade libcrypt-openssl-dsa-perl to 0.13-4 or later.","affected":[{"fixed":"0.13-4","introduced":"0"}],"component":"libcrypt-openssl-dsa-perl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.13-4"],"id":"tcs_01M5N975VAZARYKJRPHK5NY3ZP","modified_at":"2026-10-23T17:47:30.625296465Z","published_at":"2009-01-15T17:30:00.627Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2009-0129","https://security-tracker.debian.org/tracker/CVE-2009-0129"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2009-0129#Debian:13/libcrypt-openssl-dsa-perl","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2009-0129"}],"summary":"libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate c"}