Issue date: 2015-12-09
1. What's Included in This Update
The new packages for Parallels Server Bare Metal 5.0 provide a security and stability fix.
2. Bug Fixes
- A malicious guest administrator could trigger a DoS causing the host to hang indefinitely. (#PSBM-41569) After updating, no host reboot or 'parallels-server' restart is necessary. To avoid the vulnerability in the future, each VM on the host should either be restarted or suspended/resumed. Alternatively, VMs on the host can be migrated to an updated host.
3. Updated RPMs
parallels-kmod-5.0.19503.1226669-220.127.116.11_042stab112.15.x86_64.rpm parallels-reconfiguration-5.0.19503.1226669-1.noarch.rpm parallels-server-5.0.19503.1226669-1.x86_64.rpm parallels-server-bm-release-5.0.0-1358.x86_64.rpm parallels-server-cli-5.0.19503.1226669-1.x86_64.rpm parallels-server-docs-5.0.19503.1226669-1.x86_64.rpm parallels-server-lib-5.0.19503.1226669-1.x86_64.rpm parallels-server-vi-cli-5.0.19503.1226669-1.x86_64.rpm parallels-virtualization-sdk-5.0.19503.1226669-1.x86_64.rpm parallels-web-5.0.19503.1226669-1.noarch.rpm
All Parallels Server Bare Metal 5.0 users are advised to update their tools packages.
4. Obtaining the Update
You can download and install the update using the vzup2date utility included in the Parallels Server Bare Metal 5.0 distribution.
Copyright (c) 1999-2014 Parallels IP Holdings GmbH and its affiliates. All rights reserved.