gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)

lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate...

SuSE 11.2 / 11.3 Security Update : openssl-certs (SAT Patch Numbers 8681 / 8682)

openssl-certs was updated with the current certificate data available from mozilla.org. Changes : - Updated certificates to revision 1.95 Distrust a sub-ca that issued google.com certificates. 'Distrusted AC DG Tresor SSL'. bnc854367 Many CA updates from Mozilla : - new:...

Mandriva Linux Security Advisory : nss (MDVSA-2013:257)

A vulnerability has been discovered and corrected in mozilla NSS : Mozilla Network Security Services NSS before 3.15.2 does not ensure that data structures are initialized before read operations, which allow remote attackers to cause a denial of service or possibly have unspecified other impact v...

Fedora 19 : python-pip-1.3.1-4.fc19 (2013-13216)

Fix potential DOS with specially crafted malicious SSL certs. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Note that Tenable...

Fedora 18 : python-pip-1.3.1-4.fc18 (2013-13140)

Fix potential DOS with specially crafted malicious SSL certs. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Note that Tenable...

Fedora 17 : python-pip-1.3.1-4.fc17 (2013-13213)

Fix potential DOS with specially crafted malicious SSL certs. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Note that Tenable...

Security firm Bit9 hacked, Stolen Digital Certs Used To Sign Malware

None...

EU Proposes New Data Breach Notification Law, CERTs

Under an EU law proposed yesterday, a collection of firms across Europe would have to alert regulators when they’ve been hacked, suffered a data breach or been attacked online. The law would also appoint a computer emergency response team CERT to all 27 EU members that would be responsible for...

At The Ritz-Carlton, San Juan, Puerto Rico

Held annually, this year’s Security Analyst Summit, as always aims to foster conversation and collaboration between Kaspersky Lab researchers and global law enforcement agencies, CERTs and other cyber-crime fighters...

UBUNTU-CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

Microsoft launching Real Time Hosted Threat Intelligence Feed

Microsoft launching Real Time Hosted Threat Intelligence Feed Microsoft is to offer a real-time intelligence feed of botnet and e-crime data to public and private sector subscribers, according to security company Kaspersky. Currently, Microsoft is testing a real-time feed to distribute informatio...

Microsoft Readying Real Time Hosted Threat Intelligence Feed

New York City – Microsoft has proven that it can take down huge, global botnets like Kelihos, Rustock and Waldec. Now the company is ready to start making the data it acquires in those busts available to governments, law enforcement and customers as a real time threat intelligence feed...

SuSE 11.1 Security Update : openssl-certs (SAT Patch Number 5085)

This updates includes the latest SSL root certificates trusted by Mozilla as of 2011-08-31. This includes removing the DigiNotar CA. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 10 Security Update : openssl-certs (ZYPP Patch Number 7719)

This updates includes the latest SSL root certificates trusted by Mozilla as of 2011-08-31. This includes removing the DigiNotar CA. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

nss security update

nspr: 4.8.7-2 - Update to 4.8.8 nss: 3.12.10-2.0.1.el61 - Update clean.gif in the nss-3.12.10-stripped.tar.bz2 tarball 3.12.10-2 - Update builtins certs to those from NSSCKBI188RTM 3.12.10-1 - Update to 3.12.10 nss-util: 3.12.10-1 - Update to 3.12.10...

SuSE 10 Security Update : openssl-certs (ZYPP Patch Number 7718)

This updates includes the latest SSL root certificates trusted by Mozilla as of 2011-08-31. This includes removing the DigiNotar CA. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Debian Security Advisory DSA 2312-1 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 2312-1. OpenVAS Vulnerability Test $Id: deb23121.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2312-1 iceape Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

[SECURITY] [DSA 2312-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2312-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 29, 2011 http://www.debian.org/security/faq -...

BruCON – Belgium's First Security Conference

BruCON – Belgium's First Security Conference BruCON, Belgium's first security conference is back for it's third edition on 19-22 September. After witnessing greater success in the past two years, this year's event is expected to attract more then 400 people from around Europe. BruCON conference...

nss and nspr security update

3.12.9-12.0.1.el61 - Use blank image instead of clean.gif in nss-3.12.9-stripped.tar.bz2 3.12.9-12 - Retagging 3.12.10-12 - Update builtins certs to those from NSSCKBI187RTM 3.12.9-11 - Update builtins certs to those from NSSCKBI186RTM 3.12.9-10 - Update builtins certs to NSSCKBI185RTM...