[SECURITY] Fedora 19 Update: ca-certificates-2013.1.95-1.fc19

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

ca security update

CentOS Errata and Security Advisory CESA-2013:1866 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2013-December/082249.html Affected packages: ca-certificates Upstream details at: https://access.redhat.com/errata/RHSA-2013:1866...

SuSE 11.2 Security Update : libfreebl3 (SAT Patch Number 8648)

Mozilla NSS has been updated to the 3.15.3.1 security release. The update blacklists an intermediate CA that was abused to create man in the middle certificates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

Oracle Linux 6 : ca-certificates (ELSA-2013-1866)

From Red Hat Security Advisory 2013:1866 : An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. This package contains the set of CA certificate...

RHEL 6 : ca-certificates (RHSA-2013:1866)

An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. This package contains the set of CA certificates chosen by the Mozilla Foundation for use...

CentOS 6 : ca-certificates (CESA-2013:1866)

An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. This package contains the set of CA certificates chosen by the Mozilla Foundation for use...

Oracle Linux 5 / 6 : nss (ELSA-2013-1861)

From Red Hat Security Advisory 2013:1861 : Updated nss packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Network Security Services NSS is a set of libraries...

SuSE Update for ca-certificates-mozilla openSUSE-SU-2013:1891-1 (ca-certificates-mozilla)

Check for the Version of ca-certificates-mozilla OpenVAS Vulnerability Test $Id: gbsuse201318911.nasl 8650 2018-02-03 12:16:59Z teissa $ SuSE Update for ca-certificates-mozilla openSUSE-SU-2013:1891-1 ca-certificates-mozilla Authors: System Generated Check Copyright: Copyright C 2013 Greenbone...

PHP openssl_x509_parse() Memory Corruption Vulnerability

Exploit for php platform in category dos / poc Overview: Quote from http://www.php.net "PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML." The PHP function opensslx509parse uses a helper function called...

SuSE Update for ca-certificates-mozilla openSUSE-SU-2013:1870-1 (ca-certificates-mozilla)

Check for the Version of ca-certificates-mozilla OpenVAS Vulnerability Test $Id: gbsuse201318701.nasl 8672 2018-02-05 16:39:18Z teissa $ SuSE Update for ca-certificates-mozilla openSUSE-SU-2013:1870-1 ca-certificates-mozilla Authors: System Generated Check Copyright: Copyright C 2013 Greenbone...

cURL library -- cert name check ignore with GnuTLS

cURL project reports: libcurl is vulnerable to a case of missing out the checking of the certificate CN or SAN name field when the digital signature verification is turned off. libcurl offers two separate and independent options for verifying a server's TLS certificate. CURLOPTSSLVERIFYPEER and...

openSUSE: Security Advisory for ca-certificates-mozilla (openSUSE-SU-2013:1891-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for ca-certificates-mozilla (openSUSE-SU-2013:1870-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...

FreeBSD : PHP5 -- memory corruption in openssl_x509_parse() (47b4e713-6513-11e3-868f-0025905a4771)

Stefan Esser reports : The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes...

SeaMonkey < 2.23 Multiple Vulnerabilities

Binary data 8072.prm...

Mozilla Thunderbird < 24.2 Multiple Vulnerabilities

Binary data 8071.prm...

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...

PHP5 -- memory corruption in openssl_x509_parse()

Stefan Esser reports: The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes...

Design/Logic Flaw

The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements...