RHSA-2008:0264MediumCVSS 9.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Published
May 20, 2008
Last Modified
November 7, 2026

🔗 CVE IDs covered (12)

CVE-2005-1849 →CVE-2005-2096 →CVE-2005-2969 →CVE-2006-1542 →CVE-2006-2937 →CVE-2006-2940 →CVE-2006-3738 →CVE-2006-4339 →CVE-2006-4343 →CVE-2006-4980 →CVE-2007-2052 →CVE-2007-4965 →

📋 Description

CVE-2005-1849 — zlib DoS CVE-2005-2096 — zlib DoS CVE-2005-2969 — openssl mitm downgrade attack CVE-2006-1542 — python buffer overflow CVE-2006-2937 — openssl ASN.1 DoS CVE-2006-2940 — openssl public key DoS CVE-2006-3738 — openssl get_shared_ciphers overflow CVE-2006-4339 — OpenSSL: OpenSSL: Signature forgery via improper PKCS-1 padding removal leading to certificate validation bypass CVE-2006-4343 — openssl sslv2 client code CVE-2006-4980 — python repr unicode buffer overflow CVE-2007-2052 — python off-by-one locale.strxfrm() (possible memory disclosure) CVE-2007-4965 — python imageop module heap corruption

🎯 Affected products3

  • Red Hat Satellite 5.0 (RHEL v.4 AS)
  • rhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)

✅ Remediation

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (14)