Fedora alert FEDORA-2011-11951 (ca-certificates)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 14 Update: ca-certificates-2011.78-1.fc14 | |
| Date: | Wed, 07 Sep 2011 00:22:04 +0000 | |
| Message-ID: | <20110907002204.65BDD110FA8@bastion02.phx2.fedoraproject.org> | |
| Archive‑link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2011-11951 2011-09-02 04:44:45 -------------------------------------------------------------------------------- Name : ca-certificates Product : Fedora 14 Version : 2011.78 Release : 1.fc14 URL : http://www.mozilla.org/ Summary : The Mozilla CA root certificate bundle Description : This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI. -------------------------------------------------------------------------------- Update Information: This update includes the latest updates to the root Certificate Authority list from Mozilla. It was found that a Certificate Authority (CA) issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed by that CA as untrusted. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 1 2011 Joe Orton <jorton@redhat.com> - 2011.78-1 - update to r1.78, removing trust from DigiNotar root (#734679) * Wed Aug 3 2011 Joe Orton <jorton@redhat.com> - 2011.75-1 - update to r1.75 * Wed Apr 20 2011 Joe Orton <jorton@redhat.com> - 2011.74-1 - update to r1.74 * Tue Feb 8 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2011.70-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Wed Jan 12 2011 Joe Orton <jorton@redhat.com> - 2011.70-1 - update to r1.70 * Tue Nov 9 2010 Joe Orton <jorton@redhat.com> - 2010.65-3 - update to r1.65 -------------------------------------------------------------------------------- References: [ 1 ] Bug #734679 - Remove DigiNotar CA cert from RHEL packages [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=734679 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ca-certificates' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...