CVE-2015-7575

Name	CVE-2015-7575
Description	Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-410-1, DSA-3436-1, DSA-3437-1, DSA-3457-1, DSA-3458-1, DSA-3465-1, DSA-3491-1, DSA-3688-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
gnutls28 (PTS)	buster	3.6.7-4+deb10u8	fixed
	buster (security)	3.6.7-4+deb10u12	fixed
	bullseye	3.7.1-5+deb11u4	fixed
	bullseye (security)	3.7.1-5+deb11u3	fixed
	bookworm	3.7.9-2+deb12u2	fixed
	trixie	3.8.3-1	fixed
	sid	3.8.5-2	fixed
nss (PTS)	buster	2:3.42.1-1+deb10u5	fixed
	buster (security)	2:3.42.1-1+deb10u8	fixed
	bullseye (security), bullseye	2:3.61-1+deb11u3	fixed
	bookworm	2:3.87.1-1	fixed
	sid, trixie	2:3.99-1	fixed
openjdk-8 (PTS)	sid	8u402-ga-8	fixed
openssl (PTS)	buster	1.1.1n-0+deb10u3	fixed
	buster (security)	1.1.1n-0+deb10u6	fixed
	bullseye	1.1.1w-0+deb11u1	fixed
	bullseye (security)	1.1.1n-0+deb11u5	fixed
	bookworm, bookworm (security)	3.0.11-1~deb12u2	fixed
	trixie	3.1.5-1	fixed
	sid	3.2.1-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
gnutls26	source	squeeze	(not affected)
gnutls26	source	wheezy	2.12.20-8+deb7u5		DSA-3437-1
gnutls26	source	(unstable)	(unfixed)
gnutls28	source	jessie	3.3.8-6+deb8u3
gnutls28	source	(unstable)	3.3.15-1
icedove	source	squeeze	(unfixed)	end-of-life
icedove	source	wheezy	38.6.0-1~deb7u1		DSA-3491-1
icedove	source	jessie	38.6.0-1~deb8u1		DSA-3491-1
icedove	source	(unstable)	38.6.0-1
iceweasel	source	squeeze	(unfixed)	end-of-life
iceweasel	source	wheezy	38.6.0esr-1~deb7u1		DSA-3457-1
iceweasel	source	jessie	38.6.0esr-1~deb8u1		DSA-3457-1
iceweasel	source	(unstable)	43.0.2-1
nss	source	squeeze	(not affected)
nss	source	wheezy	(not affected)
nss	source	jessie	2:3.26-1+debu8u1		DSA-3688-1
nss	source	(unstable)	2:3.21-1
openjdk-6	source	squeeze	6b38-1.13.10-1~deb6u1		DLA-410-1
openjdk-6	source	wheezy	6b38-1.13.10-1~deb7u1		DSA-3465-1
openjdk-6	source	(unstable)	(unfixed)
openjdk-7	source	wheezy	7u95-2.6.4-1~deb7u1		DSA-3458-1
openjdk-7	source	jessie	7u95-2.6.4-1~deb8u1		DSA-3458-1
openjdk-7	source	(unstable)	7u95-2.6.4-1
openjdk-8	source	(unstable)	7u95-2.6.4-1
openssl	source	squeeze	(not affected)
openssl	source	wheezy	1.0.1e-2+deb7u19		DSA-3436-1
openssl	source	(unstable)	1.0.1f-1

Notes

[squeeze] - nss <not-affected> (only affects nss post 2012-07-26)
[wheezy] - nss <not-affected> (TLS 1.2 not supported in 3.14, only 3.15.1 and above)
https://www.mozilla.org/en-US/security/advisories/mfsa2015-150/
Patch in SuSE Bugzilla: https://bugzilla.suse.com/attachment.cgi?id=660286
NSS upstream fix is actually in 3.20.2: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.2_release_notes
NSS patch: https://hg.mozilla.org/projects/nss/raw-rev/891676aa0d85
[squeeze] - openssl <not-affected> (Vulnerable code not present)
OpenSSL fix: https://git.openssl.org/?p=openssl.git;a=commit;h=5e1ff664f95ab4c9176b3e86b5111e5777bad61a
http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/1ad1d1b46fef
[squeeze] - gnutls26 <not-affected> (TLS1.2 not supported)
http://gnutls.org/security.html#GNUTLS-SA-2015-2
http://lists.gnutls.org/pipermail/gnutls-devel/2015-April/007572.html
https://gitlab.com/gnutls/gnutls/commit/7d9d5c61f8445dc9e9ca47bb575c77cef17da17a
https://gitlab.com/gnutls/gnutls/commit/0e3fc7881d37246fc2d51dc404cad95b205c0e1e
https://gitlab.com/gnutls/gnutls/commit/6822a37947d4e38c45b1afc0121cda35ba897182
https://www.openwall.com/lists/oss-security/2015/05/05/8
http://www.mitls.org/pages/attacks/SLOTH