rhsa-2013_1866
Vulnerability from csaf_redhat
Published
2013-12-20 00:45
Modified
2024-11-05 18:17
Summary
Red Hat Security Advisory: ca-certificates security update

Notes

Topic
An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact.
Details
This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI). It was found that a subordinate Certificate Authority (CA) mis-issued an intermediate certificate, which could be used to conduct man-in-the-middle attacks. This update renders that particular intermediate certificate as untrusted. (BZ#1038894) All users should upgrade to this updated package. After installing the update, all applications using the ca-certificates package must be restarted for the changes to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_informational_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated ca-certificates package that fixes one security issue is now\navailable for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This package contains the set of CA certificates chosen by the Mozilla\nFoundation for use with the Internet Public Key Infrastructure (PKI).\n\nIt was found that a subordinate Certificate Authority (CA) mis-issued an\nintermediate certificate, which could be used to conduct man-in-the-middle\nattacks. This update renders that particular intermediate certificate as\nuntrusted. (BZ#1038894)\n\nAll users should upgrade to this updated package. After installing the\nupdate, all applications using the ca-certificates package must be\nrestarted for the changes to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:1866",
        "url": "https://access.redhat.com/errata/RHSA-2013:1866"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-117.html",
        "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-117.html"
      },
      {
        "category": "external",
        "summary": "1038894",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1038894"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1866.json"
      }
    ],
    "title": "Red Hat Security Advisory: ca-certificates security update",
    "tracking": {
      "current_release_date": "2024-11-05T18:17:21+00:00",
      "generator": {
        "date": "2024-11-05T18:17:21+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2013:1866",
      "initial_release_date": "2013-12-20T00:45:00+00:00",
      "revision_history": [
        {
          "date": "2013-12-20T00:45:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-12-20T00:52:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T18:17:21+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                  "product_id": "6ComputeNode-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ca-certificates-0:2013.1.95-65.1.el6_5.src",
                "product": {
                  "name": "ca-certificates-0:2013.1.95-65.1.el6_5.src",
                  "product_id": "ca-certificates-0:2013.1.95-65.1.el6_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ca-certificates@2013.1.95-65.1.el6_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch",
                "product": {
                  "name": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch",
                  "product_id": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ca-certificates@2013.1.95-65.1.el6_5?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:ca-certificates-0:2013.1.95-65.1.el6_5.noarch"
        },
        "product_reference": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ca-certificates-0:2013.1.95-65.1.el6_5.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:ca-certificates-0:2013.1.95-65.1.el6_5.src"
        },
        "product_reference": "ca-certificates-0:2013.1.95-65.1.el6_5.src",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:ca-certificates-0:2013.1.95-65.1.el6_5.noarch"
        },
        "product_reference": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ca-certificates-0:2013.1.95-65.1.el6_5.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.5.z:ca-certificates-0:2013.1.95-65.1.el6_5.src"
        },
        "product_reference": "ca-certificates-0:2013.1.95-65.1.el6_5.src",
        "relates_to_product_reference": "6ComputeNode-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:ca-certificates-0:2013.1.95-65.1.el6_5.noarch"
        },
        "product_reference": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ca-certificates-0:2013.1.95-65.1.el6_5.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:ca-certificates-0:2013.1.95-65.1.el6_5.src"
        },
        "product_reference": "ca-certificates-0:2013.1.95-65.1.el6_5.src",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:ca-certificates-0:2013.1.95-65.1.el6_5.noarch"
        },
        "product_reference": "ca-certificates-0:2013.1.95-65.1.el6_5.noarch",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ca-certificates-0:2013.1.95-65.1.el6_5.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:ca-certificates-0:2013.1.95-65.1.el6_5.src"
        },
        "product_reference": "ca-certificates-0:2013.1.95-65.1.el6_5.src",
        "relates_to_product_reference": "6Workstation-6.5.z"
      }
    ]
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.