RHSA-2008:0629MediumCVSS 9.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Published
August 13, 2008
Last Modified
November 7, 2026

🔗 CVE IDs covered (12)

CVE-2005-1849 →CVE-2005-2096 →CVE-2005-2969 →CVE-2006-1542 →CVE-2006-2937 →CVE-2006-2940 →CVE-2006-3738 →CVE-2006-4339 →CVE-2006-4343 →CVE-2006-4980 →CVE-2007-2052 →CVE-2007-4965 →

📋 Description

CVE-2005-1849 — zlib DoS CVE-2005-2096 — zlib DoS CVE-2005-2969 — openssl mitm downgrade attack CVE-2006-1542 — python buffer overflow CVE-2006-2937 — openssl ASN.1 DoS CVE-2006-2940 — openssl public key DoS CVE-2006-3738 — openssl get_shared_ciphers overflow CVE-2006-4339 — OpenSSL: OpenSSL: Signature forgery via improper PKCS-1 padding removal leading to certificate validation bypass CVE-2006-4343 — openssl sslv2 client code CVE-2006-4980 — python repr unicode buffer overflow CVE-2007-2052 — python off-by-one locale.strxfrm() (possible memory disclosure) CVE-2007-4965 — python imageop module heap corruption

🎯 Affected products3

  • Red Hat Satellite 5.1 (RHEL v.4 AS)
  • rhn-solaris-bootstrap-0:5.1.1-3.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (15)