Issue date: 2016-05-24
1. What's Included in This Update
This update includes a new Virtuozzo (formerly Parallels Cloud Server) 6.0 kernel (2.6.32-042stab116.1) based on the Red Hat Enterprise Linux 6.7 kernel (2.6.32-573.26.1.el6). The new kernel contains a number of security and stability fixes from RHEL kernel 2.6.32-573.26.1.el6 as well as a number of internal security and stability fixes.
2. Bug Fixes
- NFS client with kernels 2.6.32-573.10.2.el6 or above could hang with 'not responding, still trying' messages and running processes in spinlock (https://access.redhat.com/solutions/2215491).
- Network devices that used the mainline veth driver did not check TCP checksums. vethX interfaces of OpenVZ and VZ containers are not affected as they use a different driver. The affected veth driver was used inside Docker-ready containers and could be used by host admin for their own purposes (https://access.redhat.com/solutions/2216661).
- A flaw was found in the way the Linux kernel handled IRET faults during the processing of NMIs. An unprivileged, local user could use this flaw to crash the system or, potentially (although highly unlikely), escalate their privileges on the system. (CVE-2015-5157)
- A race condition flaw was found in the way the Linux kernel's SCTP implementation handled sctp_accept() during the processing of heartbeat timeout events. A remote attacker could use this flaw to prevent further connections to be accepted by the SCTP server running on the system, resulting in a denial of service. (CVE-2015-8767)
- Crash inside pick_next_task_fair(). (PSBM-44475)
- Warning at drivers/block/ploop/io_direct_map.c:841 trim_extent_mappings. (PSBM-45999)
- LDT entries were incorrectly restored from CPT image. (OVZ-6228)
- Host could hang while accesssing CIFS shares. (OVZ-6642)
- Host could crash with a kernel bug at block/cfq-iosched.c:2806 error. (OVZ-6651)
- Added the fake memory.use_hierarchy file required for KVMs libvirtd. (OVZ-6660)
- Other internal improvements and minor bugfixes.
3. Obtaining the Update
You can download and install the update using the yum utility included in the Virtuozzo (formerly Parallels Cloud Server) 6.0 distribution.
Copyright (c) 1999-2016 Parallels IP Holdings GmbH and its affiliates. All rights reserved.