CloudLinux - KernelCare News - CloudLinux Blog - Page 2
Blog

KernelCare, Dirty Cow, systemtap and CentOS/RHEL/CL 5 - Important!!!

The systemtap scripts recommended by RedHat https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13 and many other people as workaround against CVE-2016-5195 (a.k.a DirtyCow) might be ineffective against new variations of the attack like this one: https://github.com/dirtycow/dirtycow.github.io/blob/master/pokemon.c [correction Oct 22, 7:04am: this ...
Continue reading
  5871 Hits
  0 Comments
How to use a single key to register multiple KernelCare servers
Tags:

How to use a single key to register multiple KernelCare servers

How to use a single key to register multiple KernelCare servers
KernelCare is often deployed on a large number of servers. Adding those servers one by one is a hassle. In that case, KernelCare key can be used to deploy and register multiple servers at once. Registration is still straightforward: $ kcarectl --register YOUR_KEY The key can be obtained from CLN (see image above). The same key can be used for all t...
Continue reading
  13301 Hits
  0 Comments
KernelCare supports many distributions, but does it work with your kernel?

KernelCare supports many distributions, but does it work with your kernel?

KernelCare supports many distributions, but does it work with your kernel?
We often get a question whether a particular kernel is supported by KernelCare. We support a large number of distributions and kernel versions, such as CentOS/RHEL/CL 5,6 & 7, Debian, Ubuntu, Virtuozzo & Proxmox VE. List of all supported distributions, kernels, as well as patches for them is available at http://patches.kernelcare.com. Yet, ...
Continue reading
Recent Comments
Guest — Michael Dance
Nice script Igor .
Thursday, 21 April 2016 20:57
Guest — Mr. Nam
Hello, I can't install kernelcare for my server is running Cloudlinx 7.2. Please check again. # wget -qq -O - https://raw.githubus... Read More
Saturday, 23 April 2016 07:19
WisiKlo WisiKlo
Please, try now. This has been fixed.
Saturday, 23 April 2016 17:50
  27709 Hits
  24 Comments
Debian 7 & 8 kernels patched to latest with KernelCare

Debian 7 & 8 kernels patched to latest with KernelCare

Debian 7 & 8 kernels patched to latest with KernelCare
Debian 7 kernels updated to linux-3.2.73-2+deb7u3 Debian 8 kernels updated to linux-3.16.7-ckt20-1+deb8u4 Systems with AUTO_UPDATE=True (DEFAULT) in /etc/sysconfig/kcare/kcare. conf will automatically update, and no action is needed for them. You can manually update the server by running: # /usr/bin/kcarectl --updateChangelog:debian7...
Continue reading
  7459 Hits
  0 Comments
KernelCare prevents from attacks fast - releases patches sometimes even before the native OS updates its kernel
Tags:

KernelCare prevents from attacks fast - releases patches sometimes even before the native OS updates its kernel

KernelCare prevents from attacks fast - releases patches sometimes even before the native OS updates its kernel
You might say that KernelCare lags slightly behind the upstream distributions of patches. This, however, is normal, and regardless of the delay, most of the time you will be protected by KernelCare much faster than you would do the reboot yourself. The main cause of such delay is that upstream does not disclose the vulnerability until updated kerne...
Continue reading
  5857 Hits
  0 Comments
KernelCare fan-base is growing as we reach 50,000 server installs
Tags:

KernelCare fan-base is growing as we reach 50,000 server installs

KernelCare fan-base is growing as we reach 50,000 server installs
I cannot say that I am not proud of the fact that our customer install base has grown so substantially. In the past year, KernelCare has more than tripled server installs and is still CloudLinux’s fastest growing product. Companies like Dell and LiquidWeb have deployed KernelCare to keep thousands of their Linux servers secure with all the latest k...
Continue reading
Recent comment in this post
Guest — 1uhost.com
Thanks and congratulations Igor
Thursday, 10 March 2016 21:23
  5764 Hits
  1 Comment
How to switch from Ksplice to KernelCare in a single step

How to switch from Ksplice to KernelCare in a single step

How to switch from Ksplice to KernelCare in a single step
Ksplice is a technology that updates kernels with important security patches without the need to reboot. After its acquisition by Oracle, it is now offered as part of the Oracle Linux Premier Support. KernelCare is distribution-agnostic and supports Oracle Linux kernels, as well as CentOS, CloudLinux OS, Debian, RedHat, Virtuozzo, and others.&...
Continue reading
  12889 Hits
  0 Comments
Ubuntu LTS kernels patches to latest version with KernelCare

Ubuntu LTS kernels patches to latest version with KernelCare

Ubuntu LTS kernels patches to latest version with KernelCare
  Ubuntu LTS kernels were updated to latest version. The update includes a number of security bug fixes. Systems with AUTO_UPDATE=True (DEFAULT) in /etc/sysconfig/kcare/kcare. conf will automatically update, and no action is needed for them. You can manually update the server by running:# /usr/bin/kcarectl --update Changelog:ubuntu-t...
Continue reading
  5433 Hits
  0 Comments
KernelCare protection against Rowhammer privilege escallation

KernelCare protection against Rowhammer privilege escallation

KernelCare protection against Rowhammer privilege escallation
The rmemory hardware issue "Rowhammer" was recently discovered to allows privileged escalation. The issue can be mitigated (at least in its current form) by preventing user from reading /proc/$(pid)/pagemap, /proc/kpageflags, /proc/kpagecount files. Yet, this protection is not available from RedHat, CentOS, Parallels. It is not available as part of...
Continue reading
  5004 Hits
  0 Comments
KernelCare: How does it work?

KernelCare: How does it work?

KernelCare: How does it work?

Rebooting is a pain

Rebooting server is a pain. It is often scheduled for the darkest of the night. It requires minutes of downtime, and it can take up to 15 minutes for the server performance to stabilize, and catches to warm up. This is not something you want to do often.Yet, any time there is a security vulnerability in the kernel, a server should be rebooted. This is where KernelCare comes in. It provides a service that will patch security vulnerabilities inside the running kernel - without any downtime or service interruption.

Continue reading
  8799 Hits
  0 Comments

EU e-Privacy Directive

We use cookies to ensure you get the best experience using our website and services. Read more about it in our Privacy Policy. Please agree to the use of cookies to proceed. Alternatively, you may disable cookies in your browser at any time.

You have declined cookies. This decision can be reversed.

You have allowed cookies to be placed on your computer. This decision can be reversed.