Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update
🔗 CVE IDs covered (12)
📋 Description
CVE-2005-1849 — zlib DoS CVE-2005-2096 — zlib DoS CVE-2005-2969 — openssl mitm downgrade attack CVE-2006-1542 — python buffer overflow CVE-2006-2937 — openssl ASN.1 DoS CVE-2006-2940 — openssl public key DoS CVE-2006-3738 — openssl get_shared_ciphers overflow CVE-2006-4339 — OpenSSL: OpenSSL: Signature forgery via improper PKCS-1 padding removal leading to certificate validation bypass CVE-2006-4343 — openssl sslv2 client code CVE-2006-4980 — python repr unicode buffer overflow CVE-2007-2052 — python off-by-one locale.strxfrm() (possible memory disclosure) CVE-2007-4965 — python imageop module heap corruption
🎯 Affected products6
- Red Hat Satellite v 4.2 (RHEL v.3 AS)
- Red Hat Satellite v 4.2 (RHEL v.4 AS)
- rhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)
- rhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)
- rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)
- rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)
✅ Remediation
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
🔗 References (15)
- selfhttps://access.redhat.com/errata/RHSA-2008:0525
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=235093
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=295971
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430640
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430641
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430649
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430650
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430651
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430652
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430654
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430655
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430659
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=430660
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0525.json