Emergency Maintenace - Meltdown and Spectre
You have likely seen in the news two security vulnerabilities that have come to be known as “Meltdown” and “Spectre”. Meltdown and Spectre are both hardware bugs that allow normally secret information to be read by any software that’s asking for it. “Meltdown” breaks isolation between programs and the underlying operating system, while “Spectre” breaks the isolation between running programs.
More information on these vulnerabilities available here: https://www.omahamediagroup.com/blog/article/what-you-need-to-know-about-meltdown-and-spectre
OMG HA Infrastructure requires core and backup patching on all of the parent servers as well as the backup/guest instances, this will require 2 reboots of the guest instances while we patch the parents. These vulnerabilities require immediate attention and OMG's Data Center is taking them very seriously as they pose a risk of secure information to be accessed by rogue programs and hackers.
We have schedule updates for Thursday, January 11th at 2:00AM CST (3:00AM EST). We will update when they are complete.
1/22/18 - The kernel updates and reboots are now completed for this event.
If you are tracking Critical Vulnerability Events (CVEs), the associated numbers are: CVE-2017-5754, CVE-2017-5753, and CVE-2017-5715.
Posted In: News & Events