Article ID: 127726, created on Dec 9, 2015, last review on Dec 9, 2015

  • Applies to:
  • Virtuozzo hypervisor

Issue date: 2015-12-09

1. What's Included in This Update

The new packages for Parallels Server Bare Metal 5.0 provide a security and stability fix.

2. Bug Fixes

  • A malicious guest administrator could trigger a DoS causing the host to hang indefinitely. (#PSBM-41569) After updating, no host reboot or 'parallels-server' restart is necessary. To avoid the vulnerability in the future, each VM on the host should either be restarted or suspended/resumed. Alternatively, VMs on the host can be migrated to an updated host.

3. Updated RPMs

parallels-kmod-5.0.19503.1226669-1.2.6.32_042stab112.15.x86_64.rpm
parallels-reconfiguration-5.0.19503.1226669-1.noarch.rpm
parallels-server-5.0.19503.1226669-1.x86_64.rpm
parallels-server-bm-release-5.0.0-1358.x86_64.rpm
parallels-server-cli-5.0.19503.1226669-1.x86_64.rpm
parallels-server-docs-5.0.19503.1226669-1.x86_64.rpm
parallels-server-lib-5.0.19503.1226669-1.x86_64.rpm
parallels-server-vi-cli-5.0.19503.1226669-1.x86_64.rpm
parallels-virtualization-sdk-5.0.19503.1226669-1.x86_64.rpm
parallels-web-5.0.19503.1226669-1.noarch.rpm

All Parallels Server Bare Metal 5.0 users are advised to update their tools packages.

4. Obtaining the Update

You can download and install the update using the vzup2date utility included in the Parallels Server Bare Metal 5.0 distribution.


Copyright (c) 1999-2014 Parallels IP Holdings GmbH and its affiliates. All rights reserved.

Search Words

stability

security

bugfix

a26b38f94253cdfbf1028d72cf3a498b 2897d76d56d2010f4e3a28f864d69223

Email subscription for changes to this article
Save as PDF