VMware ESX 4.0, Patch ESX400-200906411-SG: Updates udev (1011786)
Release Date: July 09, 2009
Summaries and Symptoms
Issues fixed in this patch (and their relevant symptoms, if applicable) include:
- The udev (userspace device management) program prior to 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space. The Common Vulnerabilities and Exposures Project (cve.mitre.org) has assigned the name CVE-2009-1185 to this issue.
None beyond the required patch bundles and reboot information listed in the table, above.
Patch Download and Installation
See the VMware vCenter Update Manager Administration Guide for instructions on using Update Manager to download and install patches to automatically update ESX 4.0 hosts.
To update ESX 4.0 hosts when not using Update Manager, download the patch zip file from http://support.vmware.com/selfsupport/download/ and install the bulletin using esxupdate from the command line of the host. For more information, see the ESX 4 Patch Management Guide.