[Ksplice][CloudLinux 5 Updates] New updates available via Ksplice (cloudlinux-2.6.18-338.5.1.el5.lve0.8.29)

[Reid Barton]

Synopsis: cloudlinux-2.6.18-338.5.1.el5.lve0.8.29 can now be patched
using Ksplice

Systems running CloudLinux 5 can now use Ksplice to patch against the
latest CloudLinux 5 kernel update, cloudlinux-2.6.18-338.5.1.el5.lve0.8.29.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack on CloudLinux 5 install
these updates.  You can install these updates by running:

# /usr/sbin/uptrack-upgrade -y

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any additional action.


DESCRIPTION

* Kernel oops when running nfsd.

A missing check in atime handling could result in a kernel oops when
running an in-kernel NFS server.


* Use-after-free vulnerability in IPv6 route enumeration.

The IPv6 subsystem sometimes deallocated a data structure while there
were still references to it.  A local unprivileged user could exploit
this to cause a denial of service (kernel panic) or possibly other
unspecified impact.

SUPPORT

Ksplice support is available at support at ksplice.com or +1 765-577-5423.