[Important] [Security] Virtuozzo ReadyKernel patch 145.2 for Virtuozzo Server 7.5

Issue date: 2022-08-15

Applies to: Virtuozzo Server 7.5

Virtuozzo Advisory ID: VZA-2022-025

1. Overview

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Server 7.5.

2. Security Fixes

• [Important] [3.10.0-1160.21.1.vz7.174.13 to 3.10.0-1160.53.1.vz7.185.3] nfs: Excess dput in __put_nfs_open_context leads to a crash. (PSBM-141526)
• [Important] [3.10.0-1160.21.1.vz7.174.13 to 3.10.0-1160.53.1.vz7.185.3] Potential ARP DoS for containers in host-routed network mode. (PSBM-140896)

3. Installing the Update

Download, install, and immediately apply the patch to the current kernel by running readykernel update.

4. References

• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-174.13-145.2-1.vl7/
• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-183.5-145.2-1.vl7/
• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-185.3-145.2-1.vl7/

The new and updated packages are listed in the JSON file.