RHSA-2014:0041High

Red Hat Security Advisory: rhev-hypervisor6 security update

Published
January 21, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (4)

CVE-2013-4353 →CVE-2013-5605 →CVE-2013-5606 →CVE-2013-6449 →

📋 Description

CVE-2013-4353 — openssl: client NULL dereference crash on malformed handshake packets CVE-2013-5605 — nss: Null_Cipher() does not respect maxOutputLen (MFSA 2013-103) CVE-2013-5606 — nss: CERT_VerifyCert returns SECSuccess (saying certificate is good) even for bad certificates (MFSA 2013-103) CVE-2013-6449 — openssl: crash when using TLS 1.2 caused by use of incorrect hash algorithm

🎯 Affected products2

  • RHEV Hypervisor for RHEL-6
  • rhev-hypervisor6-0:6.5-20140112.0.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6

✅ Remediation

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 To upgrade Hypervisors in Red Hat Enterprise Virtualization environments using the disk image provided by this package, refer to: https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html

🔗 References (9)