{"cves":["CVE-2009-3555","CVE-2009-2409"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[1.4.1-3.8]\n- fix safe renegotiation on SSL3 protocol\n\n[1.4.1-3.7]\n- implement safe renegotiation - CVE-2009-3555 (#533125)\n- do not allow MD2 in certificate signatures by default - CVE-2009-2409\n  (#510197)","id":"ELSA-2010-0166","ovalId":"oval:com.oracle.elsa:def:20100166","source":"oracle_linux","title":"ELSA-2010-0166:  gnutls security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2010-0166.html"}