RHSA-2008:0524: Low: Red Hat Network Satellite Server security update

First published: Mon Jun 30 2008(Updated: )

This release corrects several security vulnerabilities in various<br>components shipped as part of the Red Hat Network Satellite Server 4.2. In<br>a typical operating environment, these components are not exposed to users<br>of Satellite Server in a vulnerable manner. These security updates will<br>reduce risk in unique Satellite Server environments.<br>Multiple flaws were fixed in the Apache HTTPD server. These flaws could<br>result in a cross-site scripting, denial-of-service, or information<br>disclosure attacks. (CVE-2004-0885, CVE-2006-5752, CVE-2006-7197,<br>CVE-2007-1860, CVE-2007-3304, CVE-2007-4465, CVE-2007-5000, CVE-2007-6388)<br>A denial-of-service flaw was fixed in mod_perl. (CVE-2007-1349)<br>A denial-of-service flaw was fixed in the jabberd server. (CVE-2006-1329)<br>Multiple cross-site scripting flaws were fixed in the image map feature in<br>the JFreeChart package. (CVE-2007-6306)<br>Multiple flaws were fixed in the IBM Java 1.4.2 Runtime. (CVE-2007-0243,<br>CVE-2007-2435, CVE-2007-2788, CVE-2007-2789)<br>Multiple flaws were fixed in the OpenMotif package. (CVE-2004-0687,<br>CVE-2004-0688, CVE-2004-0914, CVE-2005-3964, CVE-2005-0605)<br>A flaw which could result in weak encryption was fixed in the<br>perl-Crypt-CBC package. (CVE-2006-0898)<br>Multiple flaws were fixed in the Tomcat package. (CVE-2008-0128,<br>CVE-2007-5461, CVE-2007-3385, CVE-2007-3382, CVE-2007-1358, CVE-2007-1355,<br>CVE-2007-2450, CVE-2007-2449, CVE-2007-0450, CVE-2006-7196, CVE-2006-7195,<br>CVE-2006-3835, CVE-2006-0254, CVE-2005-2090, CVE-2005-4838, CVE-2005-3510)<br>Users of Red Hat Network Satellite Server 4.2 are advised to upgrade to<br>4.2.3, which resolves these issues.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• agent/weakness
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2008:0524