Bug 734381
| Summary: | Remove DigiNotar CA cert from RHEL packages | |||
|---|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Huzaifa S. Sidhpurwala <huzaifas> | |
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | |
| Status: | CLOSED ERRATA | QA Contact: | ||
| Severity: | high | Docs Contact: | ||
| Priority: | high | |||
| Version: | unspecified | CC: | jorton, wnefal+redhatbugzilla | |
| Target Milestone: | --- | Keywords: | Security | |
| Target Release: | --- | |||
| Hardware: | All | |||
| OS: | Linux | |||
| Whiteboard: | ||||
| Fixed In Version: | Doc Type: | Bug Fix | ||
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 759788 (view as bug list) | Environment: | ||
| Last Closed: | 2021-10-19 21:49:33 UTC | Type: | --- | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 734677, 734678, 734679, 845592, 984474 | |||
| Bug Blocks: | 734384 | |||
|
Description
Huzaifa S. Sidhpurwala
2011-08-30 09:33:49 UTC
DigiNotar / VASCO incident report: http://www.vasco.com/company/press_room/news_archive/2011/news_diginotar_reports_security_incident.aspx Created ca-certificates tracking bugs for this issue Affects: fedora-all [bug 734679] This issue has been addressed in following products: Red Hat Enterprise Linux 6 Via RHSA-2011:1248 https://rhn.redhat.com/errata/RHSA-2011-1248.html A follow up after the audit was completed: http://threatpost.com/en_us/blogs/final-report-diginotar-hack-shows-total-compromise-ca-servers-103112 |