7.5
9.0 7.5
Docs menu
MENU

[Important] [Security] Virtuozzo ReadyKernel Patch 153.1 for Virtuozzo Server 7.5

Issue date: 2023-02-14

Applies to: Virtuozzo Server 7.5

Virtuozzo Advisory ID: VZA-2023-003

1. Overview

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Server 7.5.

2. Security Fixes

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Quota: check the block number when reading the block in a quota file. (CVE-2021-45868)
  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Kernel data leak in ‘pfkey_register’. (CVE-2022-1353)
  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Virtualize timestamps in ‘/dev/kmsg’ and syslog outputs. (PSBM-145263)
  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Netfilter per-CPU memory leak on error path. (PSBM-141114)

3. Installing the Update

Download, install, and immediately apply the patch to the current kernel by running readykernel update.

4. References

The new and updated packages are listed in the JSON file.