{"action":"Upgrade openssl to 1.0.1f-1 or later.","affected":[{"fixed":"1.0.1f-1","introduced":"0"}],"component":"openssl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.0.1f-1"],"id":"tcs_01M5NB9ST138JV23DHTPC1XFYJ","modified_at":"2026-10-15T01:47:44.245795393Z","published_at":"2016-01-09T02:59:10.910Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-7575","https://security-tracker.debian.org/tracker/CVE-2015-7575"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-7575#Debian:14/openssl","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-7575"}],"summary":"Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TL"}