[SECURITY] [DSA 2309-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2309-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 13, 2011 http://www.debian.org/security/faq -...

nspr, nss security update

CentOS Errata and Security Advisory CESA-2011:1282 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2011-September/080075.html https://lists.centos.org/pipermail/centos-announce/2011-September/080077.html...

GlobalSign Set to Resume CA Operations

GlobalSign is still in the process of completing the investigation into whether its certificate authority infrastructure was compromised, but the company on Tuesday was ready to resume some of its operations under “high-threat” conditions. The company said that it has found evidence that its main...

DSA-2309-1 openssl - compromised certificate authority

Bulletin has no description...

RHEL 4 / 5 / 6 : nss and nspr (RHSA-2011:1282)

Updated nss and nspr packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Network Security Services NSS is a set of libraries designed to support the...

Adobe Set to Patch Critical Reader and Acrobat Vulnerabilities

Adobe is set to release “critical” security updates on a number of their products on Tuesday as part of their monthly patch update to fix critical vulnerabilities in Adobe Reader and Acrobat. In an early notification, Adobe said it would release critical updates for a wide range of versions of...

Ubuntu: Security Advisory (USN-1197-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2307-1 : chromium-browser - several vulnerabilities

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-2818 Use-after-free vulnerability in Google Chrome allows remote attackers to cause a denial of service or possibly have unspecified oth...

GlobalSign Says Web Server Was Hacked, But No Signs of CA Breach

GlobalSign has found evidence that its main Web server was compromised recently, but has not discovered any indications that its certificate authority infrastructure was hacked, contrary to claims by the attacker responsible for the DigiNotar CA hack. The company, which is one of the larger CAs i...

CVE-2011-3422

The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated b...

MozillaThunderbird: 3.1.13 (important)

This update brings Mozilla Thunderbird to 3.1.13. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.ht ml...

MozillaFirefox: 6.0.2 (important)

This update brings Mozilla Firefox to 6.0.2. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.ht ml...

Adobe Says It Is Breaking Ties To Diginotar

Software giant Adobe said on Thursday that it was removing Diginotar’s Qualified CA certificate from the Adobe Approved Trust List AATL, according to a company blog post. The move would effect Adobe Reader and Adobe Acrobats Versions 9 and X. It is just the latest move by major software vendors t...

Mozilla Asks Firefox CAs to Audit Security Systems in Wake of DigiNotar Hack

Already having revoked trust in the root certificates issued by DigiNotar, Mozilla is taking steps to avoid having to repeat that process with any other certificate authority trusted by Firefox, asking all of the CAs involved in the root program to conduct audits of their PKIs and verify that...

GlobalSign Investigation Continues, Some CA Services to Return Monday

UPDATE: A day after suspending the issuance of SSL certificates while it investigates claims that its certificate authority infrastructure was compromised, GlobalSign said that the investigation is still ongoing but that it planned to begin bringing some of its services back online on Monday...

mozilla-nss: Update 3.12.11 update (important)

This update updates mozilla nss to 3.12.11. It blacklists the lately compromised DigiNotar Certificate Authority...

SeaMonkey < 2.3.3 Untrusted CA

The installed version of SeaMonkey is earlier than 2.3.3. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of SeaMonkey. Note this is a further fix to MFSA 2011-34, which...

Firefox 3.6.x < 3.6.22 Untrusted CA

The installed version of Firefox 3.6.x is earlier than 3.6.22. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Firefox. Note this is a further fix to MFSA 2011-34,...

Mozilla Thunderbird < 6.0.2 Untrusted CA

The installed version of Thunderbird is earlier than 6.0.2. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Thunderbird. Note this is a further fix to MFSA 2011-34,...

Fraudulent DigiNotar Certificates HTTPS Spoofing

A security breach had been reported at DigiNotar, a certification authority present in the Trusted Root Certification Authorities Store on all supported versions of Microsoft Windows. Several of DigiNotar's digital certificates had been signed on behalf of a third party, without sufficiently...