Fix for CVE-2014-2037

CVE-2014-2037 is a continuation of CVE-2013-6466.  We missed some
cases.  This patch was taken from RedHat's Openswan patch cluster.

Original authors of this patch are Paul Wouters and Hugh Redelmeier.
SAREF: kernel patches updated to linux 3.11.0
Update VERSION to 2.6.41