Patches for Meltdown for Cloud Linux 6 hybrid
Irina Semenova
Dear Customers,
We have released patches for Meltdown vulnerability for above-mentioned distributions. Our internal tests, as well as tests with live customers over the past two days, didn't reveal any crashes.
Systems with AUTO_UPDATE=True (DEFAULT) in /etc/sysconfig/kcare/kcare.conf will automatically update, and no action is needed for them.
You can manually update the server by running:
# /usr/bin/kcarectl --update
Changelog:
cl6h:
CVE-2017-5754: Systems with microprocessors utilizing speculative execution and
indirect branch prediction may allow unauthorized disclosure of information to
an attacker with local user access via a side-channel analysis of the data cache.
cvelist: [CVE-2017-5754]
latest-version: 3.10.0-714.10.2.lve1.4.77.el6h
helpdesk.cloudlinux.com: 24/7 Free, exceptionally good support
Follow twitter.com/CloudLinuxOS for technical updates