Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 11.10 USN-1197-8 Critical: Ca-Certificates-Java Regression Fix

ubuntu
Calendar Grey March 29, 2012
Scroller Ubuntu
Regarding Ubuntu's USN-1205-9, a flaw in ca-certificates-java has been identified which impacts the integrity of secure network connections. An update is available to address this issue.
USN-1197-7 introduced a regression in ca-certificates-java.

Summary

USN-1197-7 introduced a regression in ca-certificates-java.

Software Description:

- ca-certificates-java: Common CA certificates (JKS keystore)

Details:

USN-1197-7 fixed a vulnerability in ca-certificates-java. The new package

broke upgrades from Ubuntu 11.04 to Ubuntu 11.10. This update fixes the

problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Dutch Certificate Authority DigiNotar had

mis-issued multiple fraudulent certificates. These certificates could allow

an attacker to perform a "man in the middle" (MITM) attack which would make

the user believe their connection is secure, but is actually being

monitored.

Topics%20covered

Topics Covered

security advisory critical ubuntu man-in-the-middle regression fix ca-certificates-java

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  ca-certificates-java            20110912ubuntu3.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1197-8

https://ubuntu.com/security/notices/USN-1197-1

https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/967961

Severity
critical
Lowest
Low
Medium
High
Critical

March 29, 2012

Topics%20covered

Topics Covered

security advisory critical ubuntu man-in-the-middle regression fix ca-certificates-java

Package Information

https://launchpad.net/ubuntu/+source/ca-certificates-java/20110912ubuntu3.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.