A certificate about to expire was removed from ca-certificates.. =========================================================================Ubuntu Security Notice USN-5089-1 September 23, 2021 ca-certificates update ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.04 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: A certificate about to expire was removed from ca-certificates. Software Description: - ca-certificates: Common CA certificates Details: The ca-certificates package contained a CA certificate that will expire on 2021-09-30 and will cause connectivity issues. This update removes the “DST Root CA X3” CA. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.04: ca-certificates 20210119ubuntu0.21.04.1 Ubuntu 20.04 LTS: ca-certificates 20210119~20.04.2 Ubuntu 18.04 LTS: ca-certificates 20210119~18.04.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5089-1 https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1944481 Package Information: https://launchpad.net/ubuntu/+source/ca-certificates/20210119ubuntu0.21.04.1 https://launchpad.net/ubuntu/+source/ca-certificates/20210119~20.04.2 https://launchpad.net/ubuntu/+source/ca-certificates/20210119~18.04.2 . Essential patch for purging obsolete CA certificates on Ubuntu distributions to guarantee consistent connectivity.. Ubuntu Security Notice, ca-certificates Update, Connectivity Fix. . Severity: Critical. LinuxSecurity.com Team
An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: ca-certificates security update Advisory ID: RHSA-2011:1248-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:1248.html Issue date: 2011-09-02 ==================================================================== 1. Summary: An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - noarch Red Hat Enterprise Linux HPC Node (v. 6) - noarch Red Hat Enterprise Linux Server (v. 6) - noarch Red Hat Enterprise Linux Workstation (v. 6) - noarch 3. Description: This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI). It was found that a Certificate Authority (CA) issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed by that CA as untrusted. (BZ#734381) All users should upgrade to this updated package. After installing the update, all applications using the ca-certificates package must be restarted for the changes to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 734381 - Remove DigiNotar CAcert from RHEL packages 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: noarch: ca-certificates-2010.63-3.el6_1.5.noarch.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: noarch: ca-certificates-2010.63-3.el6_1.5.noarch.rpm Red Hat Enterprise Linux Server (v. 6): Source: noarch: ca-certificates-2010.63-3.el6_1.5.noarch.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: noarch: ca-certificates-2010.63-3.el6_1.5.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2011 Red Hat, Inc. . Important Debian notice regarding ca-certificates refresh tackling HTTPS trust vulnerabilities and deceptive certificates. Update immediately!. Red Hat, ca-certificates update, security advisory, HTTPS, security response. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.