Red Hat Security Advisory: ca-certificates security update
Affects Red Hat ca-certificatesSource GCVE Database
0
Severity
MediumRated by Threat Radar
Data as of 13 Nov 2026, 19:04 UTC
What to do
AI-suggested
Users should upgrade to the updated ca-certificates package provided by Red Hat. After installation, all applications that use the ca-certificates package must be restarted to ensure the updated trust settings take effect.
Description
A subordinate Certificate Authority (CA) mis-issued an intermediate certificate that could be exploited to perform man-in-the-middle attacks. Red Hat released an update to the ca-certificates package to mark this intermediate certificate as untrusted. Users must upgrade to the updated package and restart applications using ca-certificates for the changes to take effect.
References
- access.redhat.com/errata/RHSA-2013:1866 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- mozilla.org/security/announce/2013/mfsa2013-117.html (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1038894 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1866.json (opens in a new tab)
Community reviews
Loading reviews…