A new updated CloudLinux OS 7 and CloudLinux OS 6 hybrid kernel is now available for download from our updates-testing repository.

Changelog

kernel-3.10.0-962.3.2.lve1.5.64.el7

• CLKRN-863: CVE-2020-36385:  RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
• CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix locking for ctx->events_reported
• CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix the locking of ctx->file
• CLKRN-863: CVE-2020-36385: RDMA/cma: Add missing locking to rdma_accept()
• KMODLVE-478: add missing LVE_API_* directives into setuid feature
• CLKRN-859: added CAP_SYS_ADMIN capability allowing ptrace children
• KMODLVE-470: don't restrict root process from traversing symlinks
• KMODLVE-461: register usage cleanup
• KMODLVE-460: unused label removal

kernel-3.10.0-962.3.2.lve1.5.64.el6h

• CLKRN-863: CVE-2020-36385:  RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
• CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix locking for ctx->events_reported
• CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix the locking of ctx->file
• CLKRN-863: CVE-2020-36385: RDMA/cma: Add missing locking to rdma_accept()
• KMODLVE-478: add missing LVE_API_* directives into setuid feature
• CLKRN-859: added CAP_SYS_ADMIN capability allowing ptrace children
• KMODLVE-470: don't restrict root process from traversing symlinks
• KMODLVE-461: register usage cleanup
• KMODLVE-460: unused label removal

Update

CloudLinux OS 7:

yum install kernel-3.10.0-962.3.2.lve1.5.64.el7 --enablerepo=cloudlinux-updates-testing

CloudLinux OS 6 hybrid:

yum install kernel-3.10.0-962.3.2.lve1.5.64.el6h --enablerepo=cloudlinux-hybrid-testing