{"id":"DSA-2300-2","aliases":[],"status":"published","title":"nss - compromised certificate authority","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2011-09-05T00:00:00Z","modified":"2025-05-26T07:03:38Z","fixes":[{"ecosystem":"Debian:6.0","package":"nss","fixed_in":["3.12.8-1+squeeze3"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"nss","fixed_in":["3.12.3.1-0lenny6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.8-1+squeeze3"}]}],"versions":["3.12.8-1","3.12.8-1+squeeze1","3.12.8-1+squeeze1~bpo50+1","3.12.8-1+squeeze2","3.12.8-1+squeeze3~bpo50+1"]},{"source":"osv","ecosystem":"Debian:5.0","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3.1-0lenny6"}]}],"versions":["3.12.0-5","3.12.0-6","3.12.1-1","3.12.2.with.ckbi.1.73-1","3.12.2.with.ckbi.1.73-2","3.12.3-1","3.12.3.1-0lenny1","3.12.3.1-0lenny2","3.12.3.1-0lenny3","3.12.3.1-0lenny4","3.12.3.1-0lenny5"]}],"sources":{"osv":[{"id":"DSA-2300-2","title":"nss - compromised certificate authority","status":"published","published":"2011-09-05T00:00:00Z","modified":"2025-05-26T07:03:38.827252Z","updated_at":"2026-11-02T15:46:15.108335Z"}]}}