CloudLinux 7 and CloudLinux 6 Hybrid kernel updated

 

kernel_updated2

CloudLinux 7 and CloudLinux 6 Hybrid kernel version 3.10.0-962.3.2.lve1.5-28 is now available for download from our production repository.

Changelog

  • CLKRN-554: KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
  • CLKRN-554: kvm/x86: export MDS_NO=0 to guests when TSX is enabled
  • CLKRN-554: KVM: x86: use Intel speculation bugs and features as derived in generic x86 code
  • CLKRN-554: KVM: introduce kvm_get_arch_capabilities()
  • CLKRN-554: kvm: x86: IA32_ARCH_CAPABILITIES is always supported
  • CLKRN-554: KVM: x86: emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
  • CLKRN-554: CVE-2019-19332: KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
  • CLKRN-554: x86/atomic: fix smp_mb__{before,after}_atomic()
  • CLKRN-554: filldir[64]: remove WARN_ON_ONCE() for bad directory entries
  • CLKRN-554: make filldir[64]() verify the directory entry filename is valid
  • CLKRN-554: ext4: add more paranoia checking in ext4_expand_extra_isize handling
  • CLKRN-554: ext4: introduce ext4_clamp_want_extra_isize()
  • CLKRN-551: mm: do not stall register_shrinker
  • KMODLVE-301: fix LVE loading module service
  • KMODLVE-292: fix typo in umask assignment
  • KMODLVE-288: destroy all LVEs andLVPs before unloading kmodlve
  • KMODLVE-269 don't panic with error UBC init
  • KMODLVE-264 protect procfs access with LVP reference
  • KMODLVE-255: ignore requests moving LVE tasks to different cgroups

Update

For CloudLinux 7, run the command:

yum install kernel-3.10.0-962.3.2.lve1.5.28.el7

For CloudLinux 6 Hybrid, run the command:

yum install kernel-3.10.0-962.3.2.lve1.5.28.el6h

CloudLinux 7 and CloudLinux 6 Hybrid kernel updated

 

kernel_updated2

CloudLinux 7 and CloudLinux 6 Hybrid kernel version 3.10.0-962.3.2.lve1.5-28 is now available for download from our production repository.

Changelog

  • CLKRN-554: KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
  • CLKRN-554: kvm/x86: export MDS_NO=0 to guests when TSX is enabled
  • CLKRN-554: KVM: x86: use Intel speculation bugs and features as derived in generic x86 code
  • CLKRN-554: KVM: introduce kvm_get_arch_capabilities()
  • CLKRN-554: kvm: x86: IA32_ARCH_CAPABILITIES is always supported
  • CLKRN-554: KVM: x86: emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
  • CLKRN-554: CVE-2019-19332: KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
  • CLKRN-554: x86/atomic: fix smp_mb__{before,after}_atomic()
  • CLKRN-554: filldir[64]: remove WARN_ON_ONCE() for bad directory entries
  • CLKRN-554: make filldir[64]() verify the directory entry filename is valid
  • CLKRN-554: ext4: add more paranoia checking in ext4_expand_extra_isize handling
  • CLKRN-554: ext4: introduce ext4_clamp_want_extra_isize()
  • CLKRN-551: mm: do not stall register_shrinker
  • KMODLVE-301: fix LVE loading module service
  • KMODLVE-292: fix typo in umask assignment
  • KMODLVE-288: destroy all LVEs andLVPs before unloading kmodlve
  • KMODLVE-269 don't panic with error UBC init
  • KMODLVE-264 protect procfs access with LVP reference
  • KMODLVE-255: ignore requests moving LVE tasks to different cgroups

Update

For CloudLinux 7, run the command:

yum install kernel-3.10.0-962.3.2.lve1.5.28.el7

For CloudLinux 6 Hybrid, run the command:

yum install kernel-3.10.0-962.3.2.lve1.5.28.el6h

imunify-logo

WEB SERVER SECURITY BLOG

Subscribe to CloudLinux Newsletter