security advisorydebiancritical threat
An unauthorized SSL certificate has been found in the wild issued the DigiNotar Certificate Authority, obtained through a security compromise with said company. Debian, like other software distributors, has as a precaution decided to disable the DigiNotar . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2299-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Thijs Kinkhorst August 31, 2011 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : ca-certificates Vulnerability : comprimised certificate authority Problem type : local/remote Debian-specific: no Debian Bug : 639744 An unauthorized SSL certificate has been found in the wild issued the DigiNotar Certificate Authority, obtained through a security compromise with said company. Debian, like other software distributors, has as a precaution decided to disable the DigiNotar Root CA by default in its ca-certificates bundle. For other software in Debian that ships a CA bundle, like the Mozilla suite, updates are forthcoming. For the oldstable distribution (lenny), the ca-certificates package does not contain this root CA. For the stable distribution (squeeze), the root CA has been disabled starting ca-certificates version 20090814+nmu3. For the testing distribution (wheezy) and unstable distribution (sid), the root CA has been disabled starting ca-certificates version 20110502+nmu1. We recommend that you upgrade your ca-certificates packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . An unapproved SSL certificate issued by DigiNotar has prompted Debian to remove it through a ca-certificates revision. Immediate attention advised.. DigiNotar Compromise,Debian Security Advisory, CA Certificates Update. . Severity: Critical. LinuxSecurity.com Team
Aug 31, 2011
•Critical
Debian