RSS for all categories
FS#3306 — Kernel security updates for VPS distributions
Attached to Project— Distributions et OS
| Amélioration | |
| Linux | |
| CLOSED | |
 |
The recent discovery of a security flaw in linux kernels imply the necessity to
update some VPS distributions:
=> Distribution VPS VMware: Not affected
=> Distribution VPS Proxmox: affected
There isn't a security update available from upstream yet. In the meantime we
have recompiled a patched kernel that can be installed it like this:
wget ftp://ftp.ovh.net/made-in-ovh/dedie/proxmox/pve-kernel-2.6.24-7-pve_2.6.24-8_amd64.deb
dpkg -i pve-kernel-2.6.24-7-pve_2.6.24-8_amd64.deb
update-initramfs -tuk 2.6.24-7-pve
=> Distribution VPS Xen: affected
new kernels are available on our ftp server:
wget ftp://ftp.ovh.net/made-in-ovh/bzImage/bzImage-2.6.21.7-xxxx-xen0-ipv6-64 -O /boot/bzImage-2.6.21.7-xxxx-xen0-ipv6-64
If you have an Intel E1000E network interface (find out with:
lspci -n|grep '8086:10d3' ) you need to get this kernel instead:
wget ftp://ftp.ovh.net/made-in-ovh/bzImage/bzImage-2.6.21.7-xxxx-xen0-ipv6-64.e1000e -O /boot/bzImage-2.6.21.7-xxxx-xen0-ipv6-64
In both cases, run 'lilo' after installation and reboot.
=> Distribution VPS Virtuozzo: affected
An update seems to resolve the issue. We have prepared a script that handles all necessary steps:
wget ftp://ftp.ovh.net/made-in-ovh/dedie/virtuozzo/update.sh -O update-2.6.18-028stab064.4.sh
sh update-2.6.18-028stab064.4.sh
Please check that the settings in /boot/grub/grub.conf are correct before
rebooting.
Date: Tuesday, 25 August 2009, 12:46PMupdate some VPS distributions:
=> Distribution VPS VMware: Not affected
=> Distribution VPS Proxmox: affected
There isn't a security update available from upstream yet. In the meantime we
have recompiled a patched kernel that can be installed it like this:
wget ftp://ftp.ovh.net/made-in-ovh/dedie/proxmox/pve-kernel-2.6.24-7-pve_2.6.24-8_amd64.deb
dpkg -i pve-kernel-2.6.24-7-pve_2.6.24-8_amd64.deb
update-initramfs -tuk 2.6.24-7-pve
=> Distribution VPS Xen: affected
new kernels are available on our ftp server:
wget ftp://ftp.ovh.net/made-in-ovh/bzImage/bzImage-2.6.21.7-xxxx-xen0-ipv6-64 -O /boot/bzImage-2.6.21.7-xxxx-xen0-ipv6-64
If you have an Intel E1000E network interface (find out with:
lspci -n|grep '8086:10d3' ) you need to get this kernel instead:
wget ftp://ftp.ovh.net/made-in-ovh/bzImage/bzImage-2.6.21.7-xxxx-xen0-ipv6-64.e1000e -O /boot/bzImage-2.6.21.7-xxxx-xen0-ipv6-64
In both cases, run 'lilo' after installation and reboot.
=> Distribution VPS Virtuozzo: affected
An update seems to resolve the issue. We have prepared a script that handles all necessary steps:
wget ftp://ftp.ovh.net/made-in-ovh/dedie/virtuozzo/update.sh -O update-2.6.18-028stab064.4.sh
sh update-2.6.18-028stab064.4.sh
Please check that the settings in /boot/grub/grub.conf are correct before
rebooting.
Reason for closing: Done
Additional comments about closing: All distributions with own kernel are up-to-date.
proxmox has released a kernel update that is available via apt. To install it, use Debian's package management:
aptitude update && aptitude safe-upgrade
update-initramfs -tuk 2.6.24-7-pve
We advise to routinely check /boot/grub/menu.lst before rebooting.