OpenVZ Forum


Home » General » Support » Urgent: GhostLock (CVE-2026-43499) on OpenVZ 7 Where is the patch for WebPros / SolusVM users?
Re: Urgent: GhostLock (CVE-2026-43499) on OpenVZ 7 Where is the patch for WebPros / SolusVM users? [message #53894 is a reply to message #53893] Sun, 12 July 2026 11:44 Go to previous messageGo to previous message
dmc_dtc is currently offline  dmc_dtc
Messages: 21
Registered: May 2014
Location: Serbia
Junior Member
Yeah, yesterday i had same problem, you are left with error 403 when you try to click on attachments, but if you go to URL of attached file in browser and click enter in the address bar after url of attachment - the download start - In any case i've created github page so anyone can try

https://github.com/dmcdtc/openvz-cve-patch-2026

I am planning to make .rpms of kernel made form .src.rpm official one, i made one for CentOS7 yesterday and it seems to work, just the source of my OpenVZ kernel will probably be 119 version (src.rpm) and i will add this patch so i can get binary kernel files. Again, i will wait few days for official patch before i do this kind of work, in the meantime you can use this patch for some important server.


EDIT: ive posted kernel.spec patch and binary kernel releases build with that spec.. so basically you just need to rpm -i vzkernel-3.10.0-1160.119.1.vz7.224.4.custom.x86_64.rpm - just for security reasons it is probably safer to build it your self with my patch and spec to be sure no other files were modified..


>> dmc / dtc <<

[Updated on: Sun, 12 July 2026 15:51]

Report message to a moderator

 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: Openvz7 and CVE-2026-31431 (Copy Fail) vulnerability
Next Topic: Forum auto-registration is closed
Goto Forum:
  


Current Time: Mon Aug 24 10:51:40 GMT 2026

Total time taken to generate the page: 1.14129 seconds