Nom du paquet
rootcerts
Date
2013-01-09
Advisory ID
MDVSA-2013:003
Affected versions
2011 i586 , 2011 x86_64

Problem description

Google reported to Mozilla that TURKTRUST, a certificate authority in
Mozillas root program, had mis-issued two intermediate certificates
to customers. The issue was not specific to Firefox but there was
evidence that one of the certificates was used for man-in-the-middle
(MITM) traffic management of domain names that the customer did not
legitimately own or control. This issue was resolved by revoking the
trust for these specific mis-issued certificates (CVE-2013-0743).

The rootcerts package has been upgraded to address this flaw and the
Mozilla NSS package has been rebuilt to pickup the changes.

Updated packages

2011 i586

 196c985cb9a0c43026b517740bc84964  2011/i586/libnss3-3.14-0.2-mdv2011.0.i586.rpm
 9e8211d7552f2f4c29e5100c2e22666d  2011/i586/libnss-devel-3.14-0.2-mdv2011.0.i586.rpm
 73cac4a13ff3263762bd6e6958fd9ee5  2011/i586/libnss-static-devel-3.14-0.2-mdv2011.0.i586.rpm
 22b7d7c8c8cb651dc8f029ea4a21df62  2011/i586/nss-3.14-0.2-mdv2011.0.i586.rpm
 d4104fdc7fd808e2065cf11c9579881e  2011/i586/rootcerts-20121229.00-1-mdv2011.0.i586.rpm
 8892d8d81576147685b6c6c2f27a3cc1  2011/i586/rootcerts-java-20121229.00-1-mdv2011.0.i586.rpm 
 2a1932633742f095598acbc71a65e07e  2011/SRPMS/nss-3.14-0.2.src.rpm
 988252152ffcacd263670b84a70a4eb3  2011/SRPMS/rootcerts-20121229.00-1.src.rpm

2011 x86_64

 cceba1cdc46199e9acf7702784637321  2011/x86_64/lib64nss3-3.14-0.2-mdv2011.0.x86_64.rpm
 6cea0e30ea682bf7a067486b17205107  2011/x86_64/lib64nss-devel-3.14-0.2-mdv2011.0.x86_64.rpm
 ba17542fa03c2e19ad05f49fd7be52bc  2011/x86_64/lib64nss-static-devel-3.14-0.2-mdv2011.0.x86_64.rpm
 d89adc7b2d715f9979e30b40881c7f6a  2011/x86_64/nss-3.14-0.2-mdv2011.0.x86_64.rpm
 6f42e1222e7670a942e887f6e1dd5a00  2011/x86_64/rootcerts-20121229.00-1-mdv2011.0.x86_64.rpm
 da48a7a352314122da074e9831d6a8ac  2011/x86_64/rootcerts-java-20121229.00-1-mdv2011.0.x86_64.rpm 
 2a1932633742f095598acbc71a65e07e  2011/SRPMS/nss-3.14-0.2.src.rpm
 988252152ffcacd263670b84a70a4eb3  2011/SRPMS/rootcerts-20121229.00-1.src.rpm

References