4327 matches found
USN-1197-5: CA Certificates vulnerability
USN-1197-1 addressed an issue in Firefox and Xulrunner pertaining to the Dutch Certificate Authority DigiNotar mis-issuing fraudulent certificates. This update provides the corresponding update for ca-certificates. Original advisory details: It was discovered that Dutch Certificate Authority...
Ubuntu 10.04 LTS / 10.10 / 11.04 : ca-certificates vulnerability (USN-1197-5)
USN-1197-1 addressed an issue in Firefox and Xulrunner pertaining to the Dutch Certificate Authority DigiNotar mis-issuing fraudulent certificates. This update provides the corresponding update for ca-certificates. It was discovered that Dutch Certificate Authority DigiNotar, had mis-issued...
seamonkey security update
CentOS Errata and Security Advisory CESA-2011:1266 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2011-September/079885.html https://lists.centos.org/pipermail/centos-announce/2011-September/079886.html Affected packages: seamonkey seamonkey-chat...
GlobalSign Investigation Continues, Some CA Services to Return Monday
UPDATE: A day after suspending the issuance of SSL certificates while it investigates claims that its certificate authority infrastructure was compromised, GlobalSign said that the investigation is still ongoing but that it planned to begin bringing some of its services back online on Monday...
Mozilla Thunderbird < 6.0.2 Untrusted CA
The installed version of Thunderbird is earlier than 6.0.2. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Thunderbird. Note this is a further fix to MFSA 2011-34,...
Firefox 3.6.x < 3.6.22 Untrusted CA
The installed version of Firefox 3.6.x is earlier than 3.6.22. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Firefox. Note this is a further fix to MFSA 2011-34,...
Google Chrome < 13.0.782.220 Untrusted CA
The version of Google Chrome installed on the remote host is earlier than 13.0.782.220. Due to a recent attack against certificate authority DigiNotar, Google has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Google Chrome. Note this is a...
SeaMonkey < 2.3.3 Untrusted CA
The installed version of SeaMonkey is earlier than 2.3.3. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of SeaMonkey. Note this is a further fix to MFSA 2011-34, which...
DigiNotar Hacker Says He Has GlobalSign Database Backups, Other Data
As GlobalSign continues the investigation into the claimed compromise of its CA infrastructure, the attacker who says he breached DigiNotar and Comodo said in another message on Pastebin Wednesday that not only did he hack GlobalSign, but he has the private key used to sign the certificate for th...
[SECURITY] Fedora 16 Update: ca-certificates-2011.78-1.fc16
This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...
[SECURITY] Fedora 14 Update: ca-certificates-2011.78-1.fc14
This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...
Fedora 14 : ca-certificates-2011.78-1.fc14 (2011-11951)
This update includes the latest updates to the root Certificate Authority list from Mozilla. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed ...
Fedora 16 : ca-certificates-2011.78-1.fc16 (2011-11907)
This update includes the latest updates to the root Certificate Authority list from Mozilla. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed ...
RHEL 6 : ca-certificates (RHSA-2011:1248)
An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. This package contains the set of CA certificates chosen by the Mozilla Foundation for use...
What You Need to Know About the DigiNotar Hack
The disturbingly complete compromise of DigiNotar, the Dutch certificate authority, has broad ramifications for other CAs, enterprises and consumers who rely on the shaky web of trust that comprises the CA system. Here’s what you should know about the attack and what you can do to protect yoursel...
Comodo, DigiNotar Attacks Expose Crumbling Foundation of CA System
There are a lot of things in the security world that are broken and there isn’t room to list them all, even on the Internet. But if the events of the last few days have shown us anything, it’s that the certificate authority infrastructure is beyond broken and there’s no quick fix looming on the...
Debian DSA-2300-2 : nss - compromised certificate authority
Several unauthorised SSL certificates have been found in the wild issued for the DigiNotar Certificate Authority, obtained through a security compromise with said company. Debian, like other software distributors, has as a precaution decided to disable the DigiNotar Root CA by default in the NSS...
Debian DSA-2299-1 : ca-certificates - compromised certificate authority
An unauthorized SSL certificate has been found in the wild issued for the DigiNotar Certificate Authority, obtained through a security compromise with said company. Debian, like other software distributors, has as a precaution decided to disable the DigiNotar Root CA by default in its...
[SECURITY] [DSA 2299-1] ca-certificates security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2299-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 31, 2011 http://www.debian.org/security/faq -...