CERT mailing list archives

Current Activity - Adobe Releases Security Bulletin About Code Signing Certificate


From: Current Activity <us-cert () us-cert gov>
Date: Fri, 28 Sep 2012 12:07:35 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

National Cyber Awareness System

US-CERT Current Activity
Adobe Releases Security Bulletin About Code Signing Certificate

Original release date: September 28, 2012
Last revised: --

Adobe has released a security bulletin to address an issue with a
current Adobe code signing certificate. The certificate to be revoked
has been used to sign malicious code. The certificate will be revoked on
October 4, 2012 for all software code signed after July 10, 2012. Adobe
is issuing a new digital certificate for all affected products.

US-CERT encourages users and administrators to review the Adobe Security
Bulletin ASPA12-01 and take any necessary actions to help mitigate the
risk.

Relevant URL(s):
<http://www.adobe.com/support/security/advisories/apsa12-01.html>


____________________________________________________________________

   Produced by US-CERT, a government organization.
____________________________________________________________________

This product is provided subject to this Notification:
http://www.us-cert.gov/privacy/notification.html

Privacy & Use policy:
http://www.us-cert.gov/privacy/

This document can also be found at
http://www.us-cert.gov/current/#adobe_releases_security_bulletin_revokes

For instructions on subscribing to or unsubscribing from this
mailing list, visit http://www.us-cert.gov/cas/signup.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBUGXLPHdnhE8Qi3ZhAQLXrAgAkxEavX+73oQIaTBShQxVlM0jLOCEVpIE
QowBTvKq2OvkPb2xCIaw05sR59VZvktrx5qyCX0fAPkX0RAtYCJN0nbBGU+qg+O8
eFGyngi4WmrpUZ9aNscehFwhexYcbLEkQYY8CxOy11VQkFJudpUK9TXYiLMdun6g
XmvB/473wmozoaIfiO9TqJdIvsamAYqjf1OclG56HMdm5oky/NmSCNYyaxJdqFlc
AKyQP3mCLvOYafmSsY6SF1txcJDhM74UOW4i+/ilT5Vcu2MVL6Mrnv65/ySRGaei
PDmeXswVrhZpG0p0O7UGQAbL2XcwTvt6yXqQN1XFLM3/u6HGE4EzeA==
=eXcL
-----END PGP SIGNATURE-----


Current thread: