OVHcloud Bare Metal Cloud Status

Current status
Legend
  • Operational
  • Degraded performance
  • Partial Outage
  • Major Outage
  • Under maintenance
Kernel security updates for VPS distributions
Scheduled Maintenance Report for Bare Metal Cloud
Completed
The recent discovery of a security flaw in linux kernels imply the necessity to
update some VPS distributions:

=> Distribution VPS VMware: Not affected


=> Distribution VPS Proxmox: affected
There isn't a security update available from upstream yet. In the meantime we
have recompiled a patched kernel that can be installed it like this:

wget ftp://ftp.ovh.net/made-in-ovh/dedie/proxmox/pve-kernel-2.6.24-7-pve_2.6.24-8_amd64.deb
dpkg -i pve-kernel-2.6.24-7-pve_2.6.24-8_amd64.deb
update-initramfs -tuk 2.6.24-7-pve


=> Distribution VPS Xen: affected
new kernels are available on our ftp server:
wget ftp://ftp.ovh.net/made-in-ovh/bzImage/bzImage-2.6.21.7-xxxx-xen0-ipv6-64 -O /boot/bzImage-2.6.21.7-xxxx-xen0-ipv6-64

If you have an Intel E1000E network interface (find out with:
lspci -n|grep '8086:10d3' ) you need to get this kernel instead:
wget ftp://ftp.ovh.net/made-in-ovh/bzImage/bzImage-2.6.21.7-xxxx-xen0-ipv6-64.e1000e -O /boot/bzImage-2.6.21.7-xxxx-xen0-ipv6-64

In both cases, run 'lilo' after installation and reboot.


=> Distribution VPS Virtuozzo: affected
An update seems to resolve the issue. We have prepared a script that handles all necessary steps:
wget ftp://ftp.ovh.net/made-in-ovh/dedie/virtuozzo/update.sh -O update-2.6.18-028stab064.4.sh
sh update-2.6.18-028stab064.4.sh

Please check that the settings in /boot/grub/grub.conf are correct before
rebooting.

Update(s):

Date: 2009-08-25 10:48:48 UTC
All distributions with own kernel are up-to-date.

Date: 2009-08-17 10:40:18 UTC
proxmox has released a kernel update that is available via apt. To install it, use Debian's package management:

aptitude update && aptitude safe-upgrade
update-initramfs -tuk 2.6.24-7-pve

We advise to routinely check /boot/grub/menu.lst before rebooting.
Posted Aug 15, 2009 - 14:16 UTC