Scientific Linux Security Update : ca-certificates on SL6.x

high Nessus Plugin ID 61130

Language:

Synopsis

The remote Scientific Linux host is missing a security update.

Description

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).

It was found that a Certificate Authority (CA) issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed by that CA as untrusted.

All users should upgrade to this updated package. After installing the update, all applications using the ca-certificates package must be restarted for the changes to take effect.

Solution

Update the affected ca-certificates package.

Plugin Details

Severity: High

ID: 61130

File Name: sl_20110902_ca_certificates_on_SL6.nasl

Version: 1.5

Type: local

Agent: unix

Family: Scientific Linux Local Security Checks

Published: 8/1/2012

Updated: 1/14/2021

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 9/2/2011

Detections

Analytics