[Ksplice][RHEL 4 Updates] New updates available via Ksplice (RHSA-2010:0676)
Greg Price
price at ksplice.com
Thu Sep 9 19:08:12 PDT 2010
Synopsis: RHSA-2010:0676 can now be patched using Ksplice
CVEs: CVE-2010-2240
Red Hat Security Advisory Severity: Important
Systems running Red Hat Enterprise Linux 4 and CentOS 4 can now use
Ksplice to patch against the latest Red Hat Security Advisory,
RHSA-2010:0676.
INSTALLING THE UPDATES
We recommend that all Ksplice Uptrack RHEL 4 and CentOS 4 users
install these updates. You can install these updates by running:
# uptrack-upgrade -y
DESCRIPTION
* CVE-2010-2240: Privilege escalation vulnerability in memory management.
When an application has a stack overflow, the stack could silently overwrite
another memory mapped area instead of a segmentation fault occurring, which
could cause an application to execute arbitrary code, possibly leading to
privilege escalation. It is known that the X Window System server can be used to
trigger this flaw. (CVE-2010-2240, Important)
SUPPORT
Ksplice support is available at support at ksplice.com or +1 765-577-5423.
More information about the RHEL4-Updates
mailing list