[Important] [Security] Virtuozzo ReadyKernel Patch 166.1 for Virtuozzo Hybrid Server 7.5¶
Issue date: 2024-01-22
Applies to: Virtuozzo Hybrid Server 7.5
Virtuozzo Advisory ID: VZA-2024-002
1. Overview¶
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5.
2. Security Fixes¶
[Important] [3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7] A use-after-free vulnerability when a packet is stalled in the bridge ARP queue. (PSBM-151735)
[Important] [3.10.0-1160.80.1.vz7.191.4, 3.10.0-1160.90.1.vz7.200.7] IPv6 NDP: Does not respond to solicitation requests. (PSBM-153018)
3. Installing the Update¶
Download, install, and immediately apply the patch to the current kernel by running readykernel update.
4. References¶
https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-185.3-166.1-1.vl7/
https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-191.4-166.1-1.vl7/
https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-200.7-166.1-1.vl7/
The new and updated packages are listed in the JSON file.