desktop-packages team mailing list archive

[Launchpad Bug Tracker <838322@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package thunderbird - 3.1.15+build1+nobinonly-
0ubuntu0.11.04.1

---------------
thunderbird (3.1.15+build1+nobinonly-0ubuntu0.11.04.1) natty-security; urgency=low

  * New upstream release v3.1.15 (THUNDERBIRD_3_1_15_BUILD1)
    - see USN-1213-1

thunderbird (3.1.14+build2+nobinonly-0ubuntu0.11.04.1) natty-security;
urgency=low

  * New upstream release v3.1.14 (THUNDERBIRD_3_1_14_BUILD2)
    - Reenable one of the Staat der Nederlanden Certificates; This was not a
      part of the compromised DigiNotar certificates (LP: #838322)
 -- Micah Gersten <micahg@xxxxxxxxxx>   Thu, 22 Sep 2011 01:19:34 -0500

** Changed in: thunderbird (Ubuntu Natty)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to thunderbird in Ubuntu.
https://bugs.launchpad.net/bugs/838322

Title:
  Remove the exemptions for the Staat der Nederlanden root

Status in The Mozilla Firefox Browser:
  Fix Released
Status in “firefox” package in Ubuntu:
  Fix Released
Status in “thunderbird” package in Ubuntu:
  Fix Released
Status in “xulrunner-1.9.2” package in Ubuntu:
  Invalid
Status in “firefox” source package in Lucid:
  Fix Released
Status in “thunderbird” source package in Lucid:
  Fix Released
Status in “xulrunner-1.9.2” source package in Lucid:
  Fix Released
Status in “firefox” source package in Maverick:
  Fix Released
Status in “thunderbird” source package in Maverick:
  Fix Released
Status in “xulrunner-1.9.2” source package in Maverick:
  Fix Released
Status in “firefox” source package in Natty:
  Fix Released
Status in “thunderbird” source package in Natty:
  Fix Released
Status in “xulrunner-1.9.2” source package in Natty:
  Invalid
Status in “firefox” source package in Oneiric:
  Fix Released
Status in “thunderbird” source package in Oneiric:
  Fix Released
Status in “xulrunner-1.9.2” source package in Oneiric:
  Invalid

Bug description:
  Here's an updated blog post on the DigiNotar issue:
  http://blog.mozilla.com/security/2011/09/02/diginotar-removal-follow-up/

  The Staat der Nederlanden root exemption has been removed.  These root certs are still believed to be trusted.  The "PKIOverheid" (PKIGovernment) intermediates under DigiNotar's control that
  did not chain to DigiNotar's root and were not previously blocked were blocked instead.

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/838322/+subscriptions