Important kernel security update: Virtuozzo ReadyKernel patch 40.0 for Virtuozzo 7.0.4 and 7.0.4 HF3¶

1. Overview¶

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to Virtuozzo kernels 3.10.0-514.16.1.vz7.30.10 (Virtuozzo 7.0.4) and 3.10.0-514.16.1.vz7.30.15 (Virtuozzo 7.0.4 HF3)

2. Security Fixes¶

• [Important] Potential use-after-free in the processing of namespaces. (PSBM-78904)

3. Bug Fixes¶

• The kernel could consider a container stopped before the resources of that container, for example, VEIP addresses, have been released. As a result, the system could fail to restart the container. (PSBM-78078)

4. Installing the Update¶

Download, install, and instantly apply the patch to the current kernel by running ‘readykernel update’.

5. References¶

• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-30.10-40.0-1.vl7/

• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-30.15-40.0-1.vl7/

The JSON file with the list of new and updated packages is available at http://docs.virtuozzo.com/vza/VZA-2017-115.json.