Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update

A Certificate Authority mis-issued two intermediate certificates that could be used for man-in-the-middle attacks across SSL, S/MIME, and code signing. Red Hat released updated NSS (3.13.6) and NSPR (4.9.2) packages to mark these certificates as untrusted and provide additional bug fixes and enhancements. Users must upgrade and restart applications to apply the changes.

• access.redhat.com/errata/RHSA-2013:0214 (opens in a new tab)
• access.redhat.com/security/updates/classification/ (opens in a new tab)
• mozilla.org/security/announce/2013/mfsa2013-20.html (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=890605 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=893371 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=893372 (opens in a new tab)
• security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0214.json (opens in a new tab)

• Red Hat Security Advisory: Satellite 6.19.6 Async UpdateCriticalVulnerability2026-11-13
• Red Hat Security Advisory: vdsm security updateHighVulnerability2018-01-05
• Red Hat Security Advisory: ovirt-guest-agent-docker security and bug fix updateHighVulnerability2018-01-05
• Red Hat Security Advisory: vdsm security updateHighVulnerability2018-01-05
• Red Hat Security Advisory: redhat-virtualization-host security updateHighVulnerability2018-01-05