594
edits
Changes
Created page with "== Changes == Since {{kernel link|rhel6|042stab112.15}}: * rebase to RHEL6.7 2.6.32-573.8.1.el6 kernel and security fixes from 2.6.32-573.12.1.el6 kernel. * Unauthorized acce..."
== Changes ==
Since {{kernel link|rhel6|042stab112.15}}:
* rebase to RHEL6.7 2.6.32-573.8.1.el6 kernel and security fixes from 2.6.32-573.12.1.el6 kernel.
* Unauthorized access to IPC objects with SysV shm and msg. (CVE-2015-7613)
* Updated fix for keyrings crash triggerable by unprivileged user. (CVE-2015-7872)
* Crash in cgroup_release_agent() after container stop. (PSBM-34262)
* Unix socket was restored incorrectly after container resume. (PSBM-39774)
* Kernel panic when online-migrating a container with an active conntrack expectation from Virtuozzo Containers for Linux 4.6 (RHEL5) to RHEL6-based kernels. (PSBM-40287)
* WARNING in tty_ldisc_open(). (PSBM-41622)
* ip6_dst_cache entries should be charged inside container. (PSBM-42323)
* Introduced a per-container limit for IPv4 network interface aliases. (PSBM-42403)
* Improvements to memory reclaimer. (PSBM-40406)
* Crash on start of containers with the hidden PIDs feature enabled (kernel.pid_ns_hide_child=1). ({{OVZ|6568}})
* Improvements to [Docker_inside_CT|Docker]].
* Minor memory leak fixes and performance optimizations.
=== See also ===
* {{RHSA|2015-2636}}
* {{RHBA|2015-1992}}
* {{CVE|2015-7613}}
* {{CVE|2015-7872}}
Since {{kernel link|rhel6|042stab112.15}}:
* rebase to RHEL6.7 2.6.32-573.8.1.el6 kernel and security fixes from 2.6.32-573.12.1.el6 kernel.
* Unauthorized access to IPC objects with SysV shm and msg. (CVE-2015-7613)
* Updated fix for keyrings crash triggerable by unprivileged user. (CVE-2015-7872)
* Crash in cgroup_release_agent() after container stop. (PSBM-34262)
* Unix socket was restored incorrectly after container resume. (PSBM-39774)
* Kernel panic when online-migrating a container with an active conntrack expectation from Virtuozzo Containers for Linux 4.6 (RHEL5) to RHEL6-based kernels. (PSBM-40287)
* WARNING in tty_ldisc_open(). (PSBM-41622)
* ip6_dst_cache entries should be charged inside container. (PSBM-42323)
* Introduced a per-container limit for IPv4 network interface aliases. (PSBM-42403)
* Improvements to memory reclaimer. (PSBM-40406)
* Crash on start of containers with the hidden PIDs feature enabled (kernel.pid_ns_hide_child=1). ({{OVZ|6568}})
* Improvements to [Docker_inside_CT|Docker]].
* Minor memory leak fixes and performance optimizations.
=== See also ===
* {{RHSA|2015-2636}}
* {{RHBA|2015-1992}}
* {{CVE|2015-7613}}
* {{CVE|2015-7872}}
