[Ksplice][Ubuntu 8.04 Updates] New updates available via Ksplice (USN-988-1)

[Tim Abbott]

Synopsis: USN-988-1 can now be patched using Ksplice
CVEs: CVE-2010-3081

Systems running Ubuntu 8.04 Hardy can now use Ksplice to patch against the 
latest Ubuntu Security Notice, USN-988-1.


INSTALLING THE UPDATES

We recommend that all Ksplice Uptrack Ubuntu 8.04 Hardy users install 
these updates.  You can install these updates by running:

# uptrack-upgrade -y


DESCRIPTION

* CVE-2010-3081: Privilege escalation through stack underflow in compat.

A flaw was found in the 32-bit compatibility layer for 64-bit systems. 
User-space memory was allocated insecurely when translating system call 
inputs to 64-bit.  A stack pointer underflow could occur when using the 
"compat_alloc_user_space" method with an arbitrary length input, as in 
getsockopt.


SUPPORT

Ksplice support is available at support at ksplice.com or +1 765-577-5423.