[Ksplice][Fedora-14-Updates] New updates available via Ksplice (FEDORA-2011-7551)

[Tim Abbott]

Synopsis: FEDORA-2011-7551 can now be patched using Ksplice
CVEs: CVE-2011-1770

Systems running Fedora 14 can now use Ksplice to patch against the latest 
Fedora security update, FEDORA-2011-7551.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack on Fedora 14 install these 
updates.  You can install these updates by running:

# /usr/sbin/uptrack-upgrade -y

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf, 
these updates will be installed automatically and you do not need to take 
any additional action.


DESCRIPTION

* CVE-2011-1770: Remote denial of service in DCCP options parsing.

Dan Rosenberg reported an issue in the Datagram Congestion Control 
Protocol (DCCP).  Remote users can cause a denial of service or 
potentially obtain access to sensitive kernel memory.


* Fix vm_pgoff wrapping during stack expansion.

The expand_downwards function in the Linux kernel did not properly handle 
wrapping of vm_pgoff.

SUPPORT

Ksplice support is available at support at ksplice.com or +1 765-577-5423.