OpenVZ vulnerability could causes public exploit

[yylzcom]

一大早上起来就看到这个消息，ramnode和iniz都已经采取补丁重启措施，buyvm和hostigation暂时还没有，有哪位知道更多详细信息和修复办法吗？

This message is to all clients on our OpenVZ servers. A critical security vulnerability was published earlier today for OpenVZ. We have upgraded to the latest kernel and reboot all OpenVZ nodes. Due to the significance of the vulnerability and the existince of a public exploit, we did not have time to send out a mass email in advance of taking action.

[yylzcom]

我错了，buyvm也采取措施了，在另外一个邮箱，hostigation暂时没动静

[webjin]

我也想知道。

[yylzcom]

@webjin 详细信息： http://kb.parallels.com/en/122142

[yywudi]

一晚上重启的不少，uptimerobot 邮件不停发过来~

[xunyu]

我也收到了，求详情

[lazycat]

BudgetVM也重启了

[yylzcom]

@xunyu
升级信息： http://kb.parallels.com/en/122142
漏洞详情： http://seclists.org/oss-sec/2014/q2/565

[heiher]

我的 BurstNET 的 OpenVZ VPS 从早上到现在仍然不能访问。

[test1122]

@heiher 好吧，我的也是。

[lazycat]

@heiher 自己进后台boot一下试试

[heiher]

@lazycat 该死的后台也连接不上。

[lfzyx]

@heiher
@test1122
@lazycat

是因为burst倒闭了，今天早上接到邮件

--

It is with great regret that we inform you that all of your services with BurstNET will be terminating on your next billing cycle/renewal/current expiration of purchased services but in all cases no later than July 25th, 2014. If you are a CO-Location client you can disregard this message. Your services will persist.
You will have until July 24th to migrate your services to other providers. On July 25th all services will be terminated.
We apologize for any inconveniences and wish you and your businesses great success.
---

[lsylsy2]

@lfzyx WTF?啥时候的新闻？

[lfzyx]

@lsylsy2 就25号的新闻

https://support.burst.net/index.php?/News/NewsItem/View/63/burstnet-update-termination-of-services

[heiher]

@lfzyx 晕死，怎么没收到邮件呢。我的数据还没备份呢。。。。这怎么办呀。

[heiher]

今天早上一看VPS又活过来了。

[lfzyx]

@heiher 你赶紧备份数据把

[test1122]

@lfzyx 那几句英语什么意思看不太懂啊。我们年费的会退钱吗