Microsoft patches 15 bugs, nukes more SSL certificates

13.09.2011

Other updates quashed bugs in WINS (Windows Internet Name Service), a component of Windows Server ; and patched a cross-site scripting vulnerability in SharePoint Server 2010, Microsoft's collaboration software.

Alongside the five updates, Microsoft delivered yet another update to deal with the theft of more than 500 digital certificates from DigiNotar.

"We are releasing another update, adding six additional DigiNotar root certificates that are cross-signed...to the Untrusted Certificate Store," said Pete Voss, a spokesman for Microsoft's Trustworthy Computing group, in a post.

Cross-signed certificates are those that DigiNotar issued, but then had co-signed by another CA -- in this case Entrust or GTE -- to allow them to be used by Windows PCs or browsers which were not already equipped with a DigiNotar certificate.

Certificates issued by Entrust or GTE will not be affected by the today's update, said Storms.