RSS Feed
News
Jan
8
Critical Updates on Fully Managed Servers
Posted by Tyler Molamphy on 08 January 2018 10:33 AM
Hello Handy Networks News subscriber,

As you may be aware, a number of serious vulnerabilities have been disclosed that affect a wide set of CPU architectures. The good news is that so far there have been no reports of this being exploited in the wild. However, because a working proof of concept exists, it is only a matter of time before an exploit is developed using these concepts.

Be advised that all Self Managed servers should be updated ASAP, regardless of Operating System. All Windows servers should install the January 2018 Windows security update and be rebooted to apply. All Linux servers should be fully updated by the package manager and rebooted to apply the new kernel, if kpslice or similar is not available. If your Self Managed Windows server is using our WSUS server for updates, the patch will be pushed to your host at approximately 8PM tonight (20:00 01/08/17 Mountain Time).

All Fully Managed Windows servers will be patched and rebooted at their normally-scheduled weekly Windows Update period. All Fully Managed Linux servers are being patched now, and will be rebooted to apply updates at midnight tonight (00:00 01/09/17 Mountain Time). Please open a ticket with us at support@handynetworks.com if you would like to schedule a reboot at a different time.


https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution
https://access.redhat.com/security/vulnerabilities/speculativeexecution

Comments (0)
Post a new comment
 
 
Full Name:
Email:
Comments:
CAPTCHA Verification 
 
Please enter the text you see in the image into the textbox below (we use this to prevent automated submissions).