14 DAY TRIAL // Mozilla has issued another round of updates for all of its products, broadening the CA ban that started with DigiNotar.
By now, the scandal has reached most people, DigiNotar, a Dutch CA was compromised in an attack and rogue SSL certificates were issued and used in the wild.
The CA failed to communicate with browser makers and there was some confusion on the broadness of the breach when the first reports started coming in, not from DigiNotar, mind you.
When it became clear that there many domains affected, including major ones like Google.com and Mozilla's own add-ons site, browser makers moved to remove trust for all certificates issued by DigiNotar.
But some certificates, used by Dutch authorities, were exempted from the ban, on indication that they had not been compromised.
After the an audit by Dutch authorities it became clear that these certificates couldn't be trusted either.
The second round of updates from Mozilla removes trust for certificates issued by Staat der Nederlanden, part of the PKIoverheid system operated by the Dutch government, which also relied on DigiNotar.
Users are urged to update to the latest Firefox, Thunderbird or SeaMonkey version if the automated update system hasn't kicked in yet.
Mozilla has now issued new updates for its web browser, Firefox 6.0.2 and Firefox 3.6.22. The Firefox 7 beta has also been updated, though Mozilla has made no announcement.
Thunderbird 6.0.2, Thunderbird 7 beta and Thunderbird 3.1.14 have also been released to remove trust for all DigiNotar-related certificates. SeaMonkey 2.3.3 has been released to deal with the same issue.
Other browser makers have proceeded in doing the same. However, mobile users are still at risk since neither Android or iOS have received any security updates.
Firefox for Windows is available for download here. Firefox for Linux is available for download here. Firefox for Mac is available for download here.
Mozilla Thunderbird for Windows is available for download here. Mozilla Thunderbird for Mac is available for download here. Mozilla Thunderbird for Linux is available for download here.
SeaMonkey for Windows is available for download here. SeaMonkey for Linux is available for download here. SeaMonkey for Mac is available for download here.