[Koha] Outage for bugs.koha-community.org : Fwd: Linode Support Ticket 9818790 - Critical Maintenance for CPU Vulnerabilities (Meltdown)

[Chris Cormack]

It looks like my linode which hosts bugs.koha-community.org and the
dashboard and few other sites will be down for maintenance
at 2018-01-19 9:00:00 AM UTC

Chris



---------- Forwarded message ----------
From:  <support at linode.com>
Date: 18 January 2018 at 16:39
Subject: Linode Support Ticket 9818790 - Critical Maintenance for CPU
Vulnerabilities (Meltdown)
To: chris at bigballofwax.co.nz



Hello,

A number of serious security vulnerabilities affecting multiple CPU
architectures were recently disclosed by Google's Project Zero team as
outlined in our blog post[1]. In order to address the disclosed
vulnerabilities, the physical hardware on which your Linode resides
will need to undergo maintenance. This is the first of several
separate maintenances that will be necessary to fully mitigate these
vulnerabilities. This maintenance specifically patches the Meltdown
vulnerability; the Spectre vulnerability will be addressed in a future
maintenance cycle. We will inform you of these maintenance cycles via
additional tickets.

Scheduled maintenance windows are listed within the Linode Manager[2]
in the time zone that was configured in your user's My Profile[3]. The
maintenance window of new Linodes and upgraded, migrated, or resized
Linodes will be reflected in the Linode Manager[2], but you may not
receive maintenance ticket updates for these changes.

The following Linode(s) have now been assigned a maintenance window in
which a reboot will occur. Please note that these times can change as
a result of the actions mentioned above. At this time your reboot
schedule in UTC is as follows:

 * 2018-01-19 9:00:00 AM UTC - bugs

You can prepare your Linode for this maintenance by following our
Reboot Survival Guide. By following this guide before your
maintenance, you will be able to ensure that services running on your
Linode are resumed properly. The Reboot Survival Guide is available
here:

https://www.linode.com/docs/uptime/reboot-survival-guide

These updates affect the underlying infrastructure that your Linode
resides on and will not affect the data stored within your Linode. To
further protect your Linode, we strongly recommend that you verify it
is configured to boot using our latest kernel, which includes patches
to help address these vulnerabilities. If your Linode's Configuration
Profile is set to utilize our latest kernel, your kernel will
automatically be updated upon rebooting.

During the maintenance window, your Linode will be cleanly shut down
and will be unavailable while we perform the updates. A two-hour
window is allocated, however the actual downtime should be much less.
After the maintenance has concluded, each Linode will be returned to
its last state (running or powered off).

We regret the short notice and the downtime required for this
maintenance. However, due to the severity of these vulnerabilities, we
have no choice but to take swift and immediate action to ensure the
safety and security of our customers. For these reasons, we must
adhere to a strict timetable, and will not be able to reschedule or
defer this maintenance.

If you experience any issues following the maintenance, please feel
free to reach out to us and we will be happy to assist.

--Linode

[1] <https://blog.linode.com/2018/01/03/cpu-vulnerabilities-meltdown-spectre>
[2] <https://manager.linode.com>
[3] <https://manager.linode.com/profile>


---
https://manager.linode.com/support/ticket/9818790