| Re: Urgent: GhostLock (CVE-2026-43499) on OpenVZ 7 Where is the patch for WebPros / SolusVM users? [message #53897 is a reply to message #53896] |
Mon, 20 July 2026 17:21   |
dmc_dtc
Messages: 21
Registered: May 2014
Location: Serbia
|
Junior Member |
|
|
It is nice to hear some good news and that this project is not dead... Just the pace is too slow for 2026. As you are all aware there were dozens of kernel vulnerabilities over 20 updates! just last month, yes, many of them are not probably applicable to openVZ7 3.10 kernel but still - OpenVZ support is just too slow and non existent ATM - no one has also said anything about for example another very serious KVM escape bug - Januscape CVE-2026-53359 it is probably not exploitable by defauult since kvm_nesting is off but still, why not patch it... so yeah, even if they come up with this patch, we would need confirmation of them picking up the pace of future kernel patches, i am slowly moving toward KVM solutions but will probably still be a bit stuck with OpenVZ on 2 or 3 clients until i manage to escape
I've checked their bitbucket for kernel *1160.129.226 and see no patch except the ones in April so yeah, looking forward if it happens
>> dmc / dtc <<
[Updated on: Mon, 20 July 2026 17:22] Report message to a moderator |
|
|
|
OpenVZ Forum
Members
Search
Help
Register
Login
Home
