rssLink RSS for all categories
 
icon_red
icon_green
icon_green
icon_red
icon_red
icon_green
icon_green
icon_red
icon_red
icon_red
icon_red
icon_green
icon_green
icon_red
icon_green
icon_red
icon_green
icon_green
icon_red
icon_red
icon_green
icon_red
icon_green
icon_red
icon_orange
icon_blue
icon_green
icon_green
icon_green
icon_green
icon_green
icon_blue
icon_green
 

FS#3306 — Kernel security updates for VPS distributions

Attached to Project— Distributions et OS
Amélioration
Linux
CLOSED
100%
The recent discovery of a security flaw in linux kernels imply the necessity to
update some VPS distributions:

=> Distribution VPS VMware: Not affected


=> Distribution VPS Proxmox: affected
There isn't a security update available from upstream yet. In the meantime we
have recompiled a patched kernel that can be installed it like this:

wget ftp://ftp.ovh.net/made-in-ovh/dedie/proxmox/pve-kernel-2.6.24-7-pve_2.6.24-8_amd64.deb
dpkg -i pve-kernel-2.6.24-7-pve_2.6.24-8_amd64.deb
update-initramfs -tuk 2.6.24-7-pve


=> Distribution VPS Xen: affected
new kernels are available on our ftp server:
wget ftp://ftp.ovh.net/made-in-ovh/bzImage/bzImage-2.6.21.7-xxxx-xen0-ipv6-64 -O /boot/bzImage-2.6.21.7-xxxx-xen0-ipv6-64

If you have an Intel E1000E network interface (find out with:
lspci -n|grep '8086:10d3' ) you need to get this kernel instead:
wget ftp://ftp.ovh.net/made-in-ovh/bzImage/bzImage-2.6.21.7-xxxx-xen0-ipv6-64.e1000e -O /boot/bzImage-2.6.21.7-xxxx-xen0-ipv6-64

In both cases, run 'lilo' after installation and reboot.


=> Distribution VPS Virtuozzo: affected
An update seems to resolve the issue. We have prepared a script that handles all necessary steps:
wget ftp://ftp.ovh.net/made-in-ovh/dedie/virtuozzo/update.sh -O update-2.6.18-028stab064.4.sh
sh update-2.6.18-028stab064.4.sh

Please check that the settings in /boot/grub/grub.conf are correct before
rebooting.
Date:  Tuesday, 25 August 2009, 12:46PM
Reason for closing:  Done
Additional comments about closing:  All distributions with own kernel are up-to-date.
Comment by OVH - Monday, 17 August 2009, 12:40PM

proxmox has released a kernel update that is available via apt. To install it, use Debian's package management:

aptitude update && aptitude safe-upgrade
update-initramfs -tuk 2.6.24-7-pve

We advise to routinely check /boot/grub/menu.lst before rebooting.