DigiNotar Hacker Says He Has GlobalSign Database Backups, Other Data

As GlobalSign continues the investigation into the claimed compromise of its CA infrastructure, the attacker who says he breached DigiNotar and Comodo said in another message on Pastebin Wednesday that not only did he hack GlobalSign, but he has the private key used to sign the certificate for th...

[SECURITY] Fedora 16 Update: ca-certificates-2011.78-1.fc16

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

[SECURITY] Fedora 14 Update: ca-certificates-2011.78-1.fc14

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

Fedora 14 : ca-certificates-2011.78-1.fc14 (2011-11951)

This update includes the latest updates to the root Certificate Authority list from Mozilla. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed ...

Fedora 16 : ca-certificates-2011.78-1.fc16 (2011-11907)

This update includes the latest updates to the root Certificate Authority list from Mozilla. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed ...

RHEL 6 : ca-certificates (RHSA-2011:1248)

An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. This package contains the set of CA certificates chosen by the Mozilla Foundation for use...

What You Need to Know About the DigiNotar Hack

The disturbingly complete compromise of DigiNotar, the Dutch certificate authority, has broad ramifications for other CAs, enterprises and consumers who rely on the shaky web of trust that comprises the CA system. Here’s what you should know about the attack and what you can do to protect yoursel...

Comodo, DigiNotar Attacks Expose Crumbling Foundation of CA System

There are a lot of things in the security world that are broken and there isn’t room to list them all, even on the Internet. But if the events of the last few days have shown us anything, it’s that the certificate authority infrastructure is beyond broken and there’s no quick fix looming on the...

Debian DSA-2299-1 : ca-certificates - compromised certificate authority

An unauthorized SSL certificate has been found in the wild issued for the DigiNotar Certificate Authority, obtained through a security compromise with said company. Debian, like other software distributors, has as a precaution decided to disable the DigiNotar Root CA by default in its...

Debian DSA-2300-2 : nss - compromised certificate authority

Several unauthorised SSL certificates have been found in the wild issued for the DigiNotar Certificate Authority, obtained through a security compromise with said company. Debian, like other software distributors, has as a precaution decided to disable the DigiNotar Root CA by default in the NSS...

[SECURITY] [DSA 2299-1] ca-certificates security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2299-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 31, 2011 http://www.debian.org/security/faq -...

Google Chrome < 13.0.782.218 Out of Date CA List (deprecated)

Binary data 6020.prm...

DSA-2300-1 nss - compromised certificate authority

Bulletin has no description...

Google Chrome < 13.0.782.218 Out of Date CA List

Binary data 800900.prm...

Firefox 3.6.x < 3.6.21 Out-of-Date CA List

The installed version of Firefox 3.6.x is earlier than 3.6.21 and is potentially affected by an out-of-date certificate authority list. Due to the issuance of several fraudulent SSL certificates, the certificate authority DigiNotar has been disabled in Mozilla Firefox. C Tenable Network Security,...

DSA-2299-1 ca-certificates - untrusted root CA

Bulletin has no description...

DigiNotar Says Its CA Infrastructure Was Compromised

VASCO, the parent company of DigiNotar, says that the fraudulent certificate for Google’s domains that the certificate authority issued was just one of many such bogus certificates it handed out in recent months, and blamed the growing scandal on an attack on its CA infrastructure. In a statement...

Design/Logic Flaw

The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...

CVE-2011-0228

The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...

EUVD-2011-0254

The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...