SimFS exploit

[turbo2ltr]

I assume this is something KH will take care of (if required)...?

From HostingSecList:

SimFS (VZ / OpenVZ)
Urgent Action Required
Looks like there is already a public exploit for the SimFS (VZ / OpenVZ) vulnerabilities that were disclosed today. The exploit will allow a malicious user to obtain any file from another container, making this a very serious vulnerability. Update should be applied as soon as possible.

Ongoing Discussion(s) via WHT:

http://www.webhostingtalk.com/showthread.php?t=1387714
http://www.webhostingtalk.com/showthread.php?t=1387707

Relevant Links / Updates:

https://openvz.org/Download/kernel/rhel6/042stab090.5
http://kb.parallels.com/en/122142

 

[turbo2ltr]

BTW, I highly suggest subscribing to http://www.hostingseclist.com/ It seems to be a good way to stay on top of security issues if you are like me and aren't constantly reading forums.

 

[KH-Jonathan]

This doesn't effect KnownHost since we use VZFS so no one has anything to worry about

 

[turbo2ltr]

Awesome, thanks!