This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.
from: Full-Disclosure digest, knowledge base
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2009:197-2 http://www.mandriva.com/security/ _______________________________________________________________________ Package : nss Date : September 11, 2009 Affected: 2008.1 _______________________________________________________________________ Problem Description: Security issues in nss prior to 3.12.3
from: Full-Disclosure digest, knowledge base
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2009:228 http://www.mandriva.com/security/ _______________________________________________________________________ Package : libneon Date : September 10, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 3.0, Corporate 4.0, Enterprise Server 5.0, Multi Network Firewall 2.0
from: Open Source Pixels
Security issues in nss prior to 3.12.3 could lead to a man-in-the-middle attack via a spoofed X.509 certificate (CVE-2009-2408) and md2 algorithm flaws (CVE-2009-2409)…
from: Linuxine - Published news
Referenced CVEs: CVE-2009-2404, CVE-2009-2408, CVE-2009-2409 Description: =========================================================== Ubuntu Security Notice USN-810-1 August 04, 2009 nss vulnerabilities CVE-2009-2404, CVE-2009-2408, CVE-2009-2409 ===================== read more
from: Infosecurity.US
Mozilla Foundation has released new security advisories (and one patch for version 3.0) , focusing on serioius flaws exposed by security researchers (independently reported by Dan Kaminsky and Moxie Marlinspike ) at last week’s Blackhat confab . This time, what happens in Vegas did not stay in Vegas… The exploitable vulnerabilities, enumerated as Mozilla Foundation Security Advisory 2009-42 and 2009-43 , cross referenced, respectively, in the MITRE CVE as CVE-2009-2408 and CVE-2009-2404 are fully mitigated by the application of the appropriate workarounds.
from: BUG.WEB.iD
Posted by Jamie Strandboge on Aug 4 Ubuntu Security Notice USN-810-1 August 04, 2009 nss vulnerabilities CVE-2009-2404, CVE-2009-2408, CVE-2009-2409 A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of…Here is the original post: [USN-810-1] NSS vulnerabilities
from: Slaptijack
I track security updates for the following vendors: Apple, Cisco, FreeBSD, Microsoft, Red Hat, and Sun Microsystems. I chose these vendors based on my own needs for the networks and systems I manage. I’ve also found that updates from these vendors tend to catch the major updates necessary for common software applications. If you have other vendors you would like me to provide updates for, send me a message . Red Hat, Inc.
