Red Hat Security Advisories · August 2013 — Red Hat Security Advisories
22 RHSAs 35 CVEs 2 EXPLOITED

Red Hat Security Response Team errata for 2013-08. Mirrored into Vulnetix VDB with downloadable CSAF.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). Each row also links to the raw CSAF document stored on the Vulnetix artefact mirror. 2 are already weaponised in the wild: see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

RHSA-2013:1133

PoC exploitCRITICAL2013-08-05

Red Hat Security Advisory: httpd security update

CVEs:CVE-2013-1862CVE-2013-1896

Affected products

ProductStatusVendorPackage
httpd-0:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat httpd-0:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
httpd-0:2.2.22-25.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat httpd-0:2.2.22-25.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
httpd-0:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat httpd-0:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
httpd-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-0:2.2.22-25.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-0:2.2.22-25.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-debuginfo-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-debuginfo-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-debuginfo-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-debuginfo-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-devel-0:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat httpd-devel-0:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
httpd-devel-0:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat httpd-devel-0:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
httpd-devel-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-devel-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-devel-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-devel-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-manual-0:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat httpd-manual-0:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
httpd-manual-0:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat httpd-manual-0:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
httpd-manual-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-manual-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-manual-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-manual-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-tools-0:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat httpd-tools-0:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
httpd-tools-0:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat httpd-tools-0:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
httpd-tools-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-tools-0:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
httpd-tools-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat httpd-tools-0:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
mod_ssl-1:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat mod_ssl-1:2.2.22-25.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
mod_ssl-1:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server fixed Red Hat mod_ssl-1:2.2.22-25.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
mod_ssl-1:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat mod_ssl-1:2.2.22-25.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
mod_ssl-1:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server fixed Red Hat mod_ssl-1:2.2.22-25.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
CSAF Red Hat errata

RHSA-2013:1135

PoC exploitCRITICAL2013-08-05

Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update

CVEs:CVE-2013-0791CVE-2013-1620

Affected products

ProductStatusVendorPackage
nspr-0:4.9.5-1.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-0:4.9.5-1.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-0:4.9.5-1.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-0:4.9.5-1.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-0:4.9.5-1.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-0:4.9.5-1.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-0:4.9.5-1.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-0:4.9.5-1.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-0:4.9.5-1.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-0:4.9.5-1.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-0:4.9.5-1.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-0:4.9.5-1.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-0:4.9.5-1.el5_9.src as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-0:4.9.5-1.el5_9.src as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-0:4.9.5-1.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-0:4.9.5-1.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-debuginfo-0:4.9.5-1.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-debuginfo-0:4.9.5-1.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-debuginfo-0:4.9.5-1.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-debuginfo-0:4.9.5-1.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-debuginfo-0:4.9.5-1.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-debuginfo-0:4.9.5-1.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-debuginfo-0:4.9.5-1.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-debuginfo-0:4.9.5-1.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-debuginfo-0:4.9.5-1.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-debuginfo-0:4.9.5-1.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-debuginfo-0:4.9.5-1.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-debuginfo-0:4.9.5-1.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-debuginfo-0:4.9.5-1.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-debuginfo-0:4.9.5-1.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-devel-0:4.9.5-1.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-devel-0:4.9.5-1.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-devel-0:4.9.5-1.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-devel-0:4.9.5-1.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-devel-0:4.9.5-1.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-devel-0:4.9.5-1.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-devel-0:4.9.5-1.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-devel-0:4.9.5-1.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-devel-0:4.9.5-1.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-devel-0:4.9.5-1.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-devel-0:4.9.5-1.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-devel-0:4.9.5-1.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
nspr-devel-0:4.9.5-1.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nspr-devel-0:4.9.5-1.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
nss-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
nss-0:3.14.3-6.el5_9.src as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-0:3.14.3-6.el5_9.src as a component of Red Hat Enterprise Linux (v. 5 server)
nss-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-debuginfo-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-debuginfo-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-debuginfo-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-debuginfo-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-debuginfo-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-debuginfo-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-debuginfo-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-debuginfo-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
nss-debuginfo-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-debuginfo-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-debuginfo-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-debuginfo-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
nss-debuginfo-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-debuginfo-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-devel-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-devel-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-devel-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-devel-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-devel-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-devel-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-devel-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-devel-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
nss-devel-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-devel-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-devel-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-devel-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
nss-devel-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-devel-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-pkcs11-devel-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-pkcs11-devel-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
nss-pkcs11-devel-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-pkcs11-devel-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-tools-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-tools-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-tools-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-tools-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
nss-tools-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-tools-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
nss-tools-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-tools-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
nss-tools-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server) fixed Red Hat nss-tools-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
CSAF Red Hat errata

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.