A new updated CloudLinux OS 7 and CloudLinux OS 6 hybrid kernel is now available for download from our updates-testing repository.
Changelog
kernel-3.10.0-962.3.2.lve1.5.64.el7
- CLKRN-863: CVE-2020-36385: RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
- CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix locking for ctx->events_reported
- CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix the locking of ctx->file
- CLKRN-863: CVE-2020-36385: RDMA/cma: Add missing locking to rdma_accept()
- KMODLVE-478: add missing LVE_API_* directives into setuid feature
- CLKRN-859: added CAP_SYS_ADMIN capability allowing ptrace children
- KMODLVE-470: don't restrict root process from traversing symlinks
- KMODLVE-461: register usage cleanup
- KMODLVE-460: unused label removal
kernel-3.10.0-962.3.2.lve1.5.64.el6h
- CLKRN-863: CVE-2020-36385: RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
- CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix locking for ctx->events_reported
- CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix the locking of ctx->file
- CLKRN-863: CVE-2020-36385: RDMA/cma: Add missing locking to rdma_accept()
- KMODLVE-478: add missing LVE_API_* directives into setuid feature
- CLKRN-859: added CAP_SYS_ADMIN capability allowing ptrace children
- KMODLVE-470: don't restrict root process from traversing symlinks
- KMODLVE-461: register usage cleanup
- KMODLVE-460: unused label removal
Update
CloudLinux OS 7:
yum install kernel-3.10.0-962.3.2.lve1.5.64.el7 --enablerepo=cloudlinux-updates-testing
CloudLinux OS 6 hybrid:
yum install kernel-3.10.0-962.3.2.lve1.5.64.el6h --enablerepo=cloudlinux-hybrid-testing