Welcome, Guest Login

Support Center

Important kernel security and product update: vulnerability fix for CVE-2015-8539, new kernel 2.6.32-042stab120.18; Virtuozzo 6.0 Update 12 Hotfix 1 (6.0.12-3656)

Last Updated: Jan 27, 2017 02:09PM UTC

Issue date: 2017-01-18

Affected products: Virtuozzo 6.0

Virtuozzo advisory ID: VZA-2017-001

1. Overview

This update provides a new Virtuozzo 6.0 kernel 2.6.32-042stab120.18 based on the Red Hat Enterprise Linux 6.8 kernel 2.6.32-642.6.1.el6. The new kernel provides security and stability fixes.

2. Security Fixes

  • [Important] Fixed handling of stored error in a negatively instantiated user key. Key management subsystems could be abused to escalate privileges through memory corruption. All kernels were affected. (CVE-2015-8539)

3. Bug Fixes

  • Possible ploop image corruption after unexpected host crash or shutdown. All previous 042stab120.x kernels were affected. (PSBM-58500)
  • CPT: Incorrect dump of permitted iptables mask could result in failure to resume or migrate container or load new iptables rules inside the resumed container. All previous 042stab kernels were affected. (PSBM-58278)

4. Installing the Update

Install the update by running 'yum update'.

5. References

The JSON file with the list of new and updated packages is available at http://docs.virtuozzo.com/vza/VZA-2017-001.json.

Open a new case
















  • You can call our Support Team:

     +1 855-466-6670  Toll-free
     +1 425-689-7142  US
     +44 203-389-8331  UK
     +49 8914-379-4365  DE
     +7 499-609-2754  RU
e13d0138f9baaceff06b8753a609e5c0@virtuozzo.desk-mail.com
https://cdn.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete