{"id":"CVE-2009-2409","aliases":["DEBIAN-CVE-2009-2409","DSA-1874-1","DSA-1888-1","DSA-1935-1","EUVD-2009-2405","GHSA-c2f9-w3c5-x385","RHSA-2009:1184","RHSA-2009:1186","RHSA-2009:1190","RHSA-2009:1207","RHSA-2009:1432","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1584","RHSA-2009:1662","RHSA-2010:0054","RHSA-2010:0163","RHSA-2010:0166"],"status":"published","title":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...","description":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0427,"percentile":0.91155,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295"],"published":"2009-07-30T19:00:00Z","modified":"2026-10-23T17:47:33Z","fixes":[{"ecosystem":"Debian:12","package":"nss","fixed_in":["3.12.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nss","fixed_in":["3.12.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nss","fixed_in":["3.12.3-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openssl","fixed_in":["0.9.8k-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["0.9.8k-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["0.9.8k-4"],"sources":["osv"]},{"ecosystem":"Debian:4.0","package":"openssl097","fixed_in":["0.9.7k-3.1etch5"],"sources":["osv"]},{"ecosystem":"Debian:4.0","package":"openssl","fixed_in":["0.9.8c-4etch9"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"openssl","fixed_in":["0.9.8g-15+lenny5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8k-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8k-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8k-4"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3.1-0lenny1"}]}],"versions":["3.12.0-5","3.12.0-6","3.12.1-1","3.12.2.with.ckbi.1.73-1","3.12.2.with.ckbi.1.73-2","3.12.3-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:4.0","package":"openssl097","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.7k-3.1etch5"}]}],"versions":["0.9.7k-3.1","0.9.7k-3.1etch1","0.9.7k-3.1etch2","0.9.7k-3.1etch3","0.9.7k-3.1etch4"]},{"source":"osv","ecosystem":"Debian:4.0","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8c-4etch9"}]}],"versions":["0.9.8c-4","0.9.8c-4etch1","0.9.8c-4etch2","0.9.8c-4etch3","0.9.8c-4etch3+m68k1","0.9.8c-4etch4","0.9.8c-4etch5","0.9.8c-4etch7","0.9.8c-4etch8"]},{"source":"osv","ecosystem":"Debian:5.0","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8g-15+lenny5"}]}],"versions":["0.9.8g-15","0.9.8g-15+lenny1","0.9.8g-15+lenny3"]},{"source":"osv","ecosystem":"Debian:4.0","package":"gnutls13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-3+etch5"}]}],"versions":["1.4.4-3","1.4.4-3+etch1","1.4.4-3+etch2","1.4.4-3+etch3","1.4.4-3+etch4"],"bundled":2},{"source":"osv","ecosystem":"Debian:5.0","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-6+lenny2"}]}],"versions":["2.4.2-5","2.4.2-6","2.4.2-6+lenny1"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::as","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::as","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::as","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::as","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_7.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::as","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_7.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::as","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_7.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::es","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::es","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::es","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el4_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::es","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_7.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::es","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_7.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:4.7::es","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el4_7.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.2","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.2","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.2","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.4-1.el5_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.2","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.2","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.2","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.2","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.2","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.3.99.3-1.el5_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.45.el3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.1.el4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.1.el4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.1.el4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.1.el4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.1.el4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.1.el4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.17-1jpp.2.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.5.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.5.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.5.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.5.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.5.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"java-1.5.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.0-1.7.b09.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.1::el4","package":"java-1.5.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el4"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.1::el4","package":"java-1.5.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.22-1jpp.1.el4"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.26"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_4.8"}]}],"bundled":2}],"products":[{"vendor":"gnu","product":"gnutls"},{"vendor":"mozilla","product":"network_security_services"},{"vendor":"openssl","product":"openssl"}],"references":[{"url":"http://secunia.com/advisories/36139","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/36157","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Not Applicable","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Not Applicable","advisory"]},{"url":"https://www.debian.org/security/2009/dsa-1888","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link","web"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/36434","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id?1022631","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/42467","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/36669","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:258","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Not Applicable","advisory"]},{"url":"https://usn.ubuntu.com/810-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Broken Link","web"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link","web"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link","web"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Not Applicable","advisory"]},{"url":"http://secunia.com/advisories/37386","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1874","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","article"]},{"url":"http://secunia.com/advisories/36739","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://support.apple.com/kb/HT3937","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2409","tags":["advisory"]},{"url":"https://usn.ubuntu.com/810-2"},{"url":"https://github.com/advisories/GHSA-c2f9-w3c5-x385"},{"url":"https://security-tracker.debian.org/tracker/CVE-2009-2409","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1184","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=508027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512912","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1184.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2404","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2404","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2408","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2408","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2408","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2409","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2409","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1186","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://rhn.redhat.com/errata/RHBA-2009-1161.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1186.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1190","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=508026","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1190.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1207","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1207.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1432","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521693","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1432.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2654","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3072","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3072","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3075","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3075","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3076","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3076","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3076","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3077","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3077","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1560","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533214","tags":["report"]},{"url":"http://blogs.sun.com/security/entry/advance_notification_of_security_updates6","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533215","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1560.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3728","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3728","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3728","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3729","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3729","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3865","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3865","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3866","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3866","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3867","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3867","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3867","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3868","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3868","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3869","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3869","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3871","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3871","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3871","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3872","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3872","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3872","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3873","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3873","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3874","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3874","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3875","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3875","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3875","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3876","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3876","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3876","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3877","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3877","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3879","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3880","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3880","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3881","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3881","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3882","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3882","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3883","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3883","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3886","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3886","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1571","tags":["advisory"]},{"url":"https://sunsolve.sun.com/search/document.do?assetkey=118666","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1571.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1584","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1584.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1662","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=395481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=474556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533185","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1662.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2426","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2426","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-2086","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2086","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2086","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1093","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1093","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1093","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1094","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1095","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1098","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1098","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1099","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1100","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1103","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1103","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1104","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1104","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1107","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1107","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1107","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2475","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2475","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2475","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2625","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2625","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2670","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2670","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2670","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2671","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2671","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2671","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2672","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2672","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2673","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2673","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2673","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2675","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2675","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2675","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2676","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2676","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2676","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2689","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2689","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2689","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0054","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546707","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0054.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-4355","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4355","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4355","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0163","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492304","tags":["report"]},{"url":"http://kbase.redhat.com/faq/docs/DOC-20491","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533125","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0163.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-0590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0590","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0590","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3555","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0166","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0166.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-2409","description":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large.","status":"published","published":"2009-07-30T19:00:00Z","modified":"2024-08-07T05:52:14.899Z","updated_at":"2026-11-02T14:33:23.041383Z"}],"euvd":[{"id":"EUVD-2009-2405","description":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large.","status":"published","published":"2009-07-30T19:00:00Z","modified":"2024-08-07T05:52:14Z","updated_at":"2026-11-03T01:39:17.521372Z"}],"ghsa":[{"id":"GHSA-c2f9-w3c5-x385","title":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...","description":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large.","status":"published","published":"2022-05-02T03:35:02Z","modified":"2025-03-27T15:31:40Z","cwes":["CWE-295"],"updated_at":"2026-11-02T15:00:29.248113Z"}],"nvd":[{"id":"CVE-2009-2409","description":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large.","status":"published","published":"2009-07-30T19:30:00.343Z","modified":"2026-06-16T23:09:23.17Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:01:36.200173Z"}],"osv":[{"id":"CVE-2009-2409","description":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large.","status":"published","published":"2009-07-30T19:30:00Z","modified":"2026-04-10T03:40:51.056206Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2009-2409","description":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large.","status":"published","published":"2009-07-30T19:30:00.343Z","modified":"2026-10-23T17:47:33.673927227Z","updated_at":"2026-11-02T15:45:24.013654Z"},{"id":"DSA-1874-1","title":"nss - several vulnerabilities","status":"published","published":"2009-08-26T00:00:00Z","modified":"2026-03-09T01:18:31.229654Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"DSA-1888-1","title":"openssl - cryptographic weakness","status":"published","published":"2009-09-16T00:00:00Z","modified":"2026-03-09T01:23:31.301875Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"DSA-1935-1","title":"gnutls13 gnutls26 - SSL certificate","status":"published","published":"2009-11-17T00:00:00Z","modified":"2026-03-09T01:23:33.072064Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2009:1184","title":"Red Hat Security Advisory: nspr and nss security and bug fix update","status":"published","published":"2024-09-15T18:02:04Z","modified":"2026-06-29T10:02:23Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1186","title":"Red Hat Security Advisory: nspr and nss security, bug fix, and enhancement update","status":"published","published":"2024-09-15T18:02:14Z","modified":"2026-06-29T10:02:24Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1190","title":"Red Hat Security Advisory: nspr and nss security and bug fix update","status":"published","published":"2024-09-15T18:02:19Z","modified":"2026-06-29T10:02:25Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1207","title":"Red Hat Security Advisory: nspr and nss security update","status":"published","published":"2024-09-15T18:02:24Z","modified":"2026-06-29T10:02:29Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1432","title":"Red Hat Security Advisory: seamonkey security update","status":"published","published":"2024-09-15T18:05:31Z","modified":"2026-06-29T10:02:32Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1560","title":"Red Hat Security Advisory: java-1.6.0-sun security update","status":"published","published":"2024-09-22T15:57:10Z","modified":"2026-06-29T10:02:37Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1571","title":"Red Hat Security Advisory: java-1.5.0-sun security update","status":"published","published":"2024-09-22T15:57:15Z","modified":"2026-06-29T10:02:38Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1584","title":"Red Hat Security Advisory: java-1.6.0-openjdk security update","status":"published","published":"2024-09-22T15:57:20Z","modified":"2026-06-29T10:02:41Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1662","title":"Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update","status":"published","published":"2024-09-29T16:26:39Z","modified":"2026-06-29T10:02:48Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0054","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T18:16:24Z","modified":"2026-06-29T10:02:57Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0163","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T17:55:36Z","modified":"2026-06-29T10:03:08Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0166","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-13T06:46:47Z","modified":"2026-06-29T10:03:10Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}