RHSA-2013:1181Medium
Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
🔗 CVE IDs covered (3)
📋 Description
CVE-2013-0791 — Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40) CVE-2013-1620 — nss: TLS CBC padding timing attack CVE-2013-4236 — vdsm: incomplete fix for CVE-2013-0167 issue
🎯 Affected products2
- RHEV Hypervisor for RHEL-6
- rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch as a component of RHEV Hypervisor for RHEL-6
✅ Remediation
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 To upgrade Hypervisors in Red Hat Enterprise Virtualization environments using the disk image provided by this package, refer to: https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2013:1181
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://rhn.redhat.com/errata/RHSA-2013-0907.html
- externalhttps://rhn.redhat.com/errata/RHSA-2013-1155.html
- externalhttps://rhn.redhat.com/errata/RHBA-2013-1158.html
- externalhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=908234
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=946947
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=996166
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=996584
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1181.json