RHSA-2006:0661HighCVSS 9.1

Red Hat Security Advisory: openssl security update

Published
September 6, 2006
Last Modified
November 7, 2026

🔗 CVE IDs covered (1)

CVE-2006-4339 →

📋 Description

CVE-2006-4339 — OpenSSL: OpenSSL: Signature forgery via improper PKCS-1 padding removal leading to certificate validation bypass

🎯 Affected products200

  • Red Hat Desktop version 3
  • Red Hat Enterprise Linux AS version 3
  • Red Hat Enterprise Linux AS version 4
  • Red Hat Enterprise Linux Desktop version 4
  • Red Hat Enterprise Linux ES version 3
  • Red Hat Enterprise Linux ES version 4
  • Red Hat Enterprise Linux WS version 3
  • Red Hat Enterprise Linux WS version 4
  • openssl-0:0.9.7a-33.18.i386 as a component of Red Hat Desktop version 3
  • openssl-0:0.9.7a-33.18.i386 as a component of Red Hat Enterprise Linux AS version 3
  • openssl-0:0.9.7a-33.18.i386 as a component of Red Hat Enterprise Linux ES version 3
  • openssl-0:0.9.7a-33.18.i386 as a component of Red Hat Enterprise Linux WS version 3
  • openssl-0:0.9.7a-33.18.i686 as a component of Red Hat Desktop version 3
  • openssl-0:0.9.7a-33.18.i686 as a component of Red Hat Enterprise Linux AS version 3
  • openssl-0:0.9.7a-33.18.i686 as a component of Red Hat Enterprise Linux ES version 3
  • openssl-0:0.9.7a-33.18.i686 as a component of Red Hat Enterprise Linux WS version 3
  • openssl-0:0.9.7a-33.18.ia64 as a component of Red Hat Enterprise Linux AS version 3
  • openssl-0:0.9.7a-33.18.ia64 as a component of Red Hat Enterprise Linux ES version 3
  • openssl-0:0.9.7a-33.18.ia64 as a component of Red Hat Enterprise Linux WS version 3
  • openssl-0:0.9.7a-33.18.ppc as a component of Red Hat Enterprise Linux AS version 3
  • openssl-0:0.9.7a-33.18.ppc64 as a component of Red Hat Enterprise Linux AS version 3
  • openssl-0:0.9.7a-33.18.s390 as a component of Red Hat Enterprise Linux AS version 3
  • openssl-0:0.9.7a-33.18.s390x as a component of Red Hat Enterprise Linux AS version 3
  • openssl-0:0.9.7a-33.18.src as a component of Red Hat Desktop version 3
  • openssl-0:0.9.7a-33.18.src as a component of Red Hat Enterprise Linux AS version 3
  • openssl-0:0.9.7a-33.18.src as a component of Red Hat Enterprise Linux ES version 3
  • openssl-0:0.9.7a-33.18.src as a component of Red Hat Enterprise Linux WS version 3
  • openssl-0:0.9.7a-33.18.x86_64 as a component of Red Hat Desktop version 3
  • openssl-0:0.9.7a-33.18.x86_64 as a component of Red Hat Enterprise Linux AS version 3
  • openssl-0:0.9.7a-33.18.x86_64 as a component of Red Hat Enterprise Linux ES version 3
  • +170 more not shown

✅ Remediation

Users of Red Hat Enterprise Linux 2.1 may need to use the command "up2date openssl openssl095a openssl096" to install these updated packages on their systems. This is due to a conflict between Galeon and the recent Seamonkey update. We will provide updated Galeon packages to fix this conflict in a future erratum. Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (8)