CloudLinux 7 and CloudLinux 6 Hybrid kernel version 3.10.0-962.3.2.lve1.5.53 is now available for download from our updates-testing repository.

Changelog

3.10.0-962.3.2.lve1.5.53

• CLKRN-749: CVE-2020-29661: tty: Fix ->pgrp locking in tiocspgrp()
• CLKRN-749: CVE-2020-28374: scsi: target: Fix XCOPY NAA identifier lookup
• CLKRN-749: xcopy: loop over devices using idr helper
• CLKRN-749: CVE-2020-25705: icmp: randomize the global rate limiter
• CLKRN-749: CVE-2021-20265: af_unix: fix struct pid memory leak
• CLKRN-749: af_unix: Revert 'lock_interruptible' in stream receive code
• CLKRN-749: CVE-2020-25656: vt: keyboard, extend func_buf_lock to readers
• CLKRN-749: CVE-2020-25656: vt: keyboard, simplify vt_kdgkbsent
• CLKRN-749: CVE-2020-25645: geneve: add transport ports in route lookup for geneve
• CLKRN-749: CVE-2020-25211: netfilter: ctnetlink: add a range check for l3/l4 protonum
• CLKRN-749: CVE-2020-14351: perf/core: Fix race in the perf_mmap_close() function
• CLKRN-749: CVE-2020-7053: drm/i915: Fix use-after-free when destroying GEM context
• CLKRN-749: CVE-2020-0427: pinctrl: devicetree: Avoid taking direct reference to device name string
• CLKRN-749: CVE-2019-19532: HID: Fix assumption that devices have inputs
• KMODLVE-410: properly handle lve_leave_pid() errors
• CLKRN-736: fix kmod-qa 0102-procfs_protection on CL7h/8
• KMODLVE-399: move exec handler to the new hook infrastructure
• CLKRN-741: adapt datacycle fsnotify hook on unlink/rmdir events to 8.2

Update

yum install kernel-3.10.0-962.3.2.lve1.5.53.el7 --enablerepo=cloudlinux-updates-testing

yum install kernel-3.10.0-962.3.2.lve1.5.53.el6h --enablerepo=cloudlinux-hybrid-testing