Ops One AG platform status and maintenance announcements. Times are indicated in local Swiss time. https://opsone.ch/.
All systems are operational
Scheduled Maintenance
Cockpit: Maintenance

We will be performing some data migrations in our Cockpit to prepare for future changes. During the scheduled maintenance window, the Cockpit might be unavailable.

Reference: #4055

Start maintenance window: 26/10/2026 22:00
Stop maintenance window: 26/10/2022 23:00

Update Imaginary

We will update Imaginary to version 20261021_180331.

Reference: #93

Start maintenance window: 26/10/2026 23:00
Stop maintenance window: 27/10/2026 02:00

Update Collabora

We will update Collabora to version 26.04.5.2.1.

Reference: #1637

Start maintenance window: 26/10/2026 23:00
Stop maintenance window: 27/10/2026 02:00

Managed Server 10: Debian Updates

We will update the following packages to the latest version.

  • libheif1/stable-security 1.23.6-2~deb13u1 amd64 [upgradable from: 1.23.4-1~deb13u1]
  • libheif-plugin-dav1d/stable-security 1.23.6-2~deb13u1 amd64 [upgradable from: 1.23.4-1~deb13u1]
  • libheif-plugin-libde265/stable-security 1.23.6-2~deb13u1 amd64 [upgradable from: 1.23.4-1~deb13u1]
  • libvarnishapi3/stable-security 7.7.0-3+deb13u2 amd64 [upgradable from: 7.7.0-3+deb13u1]
  • tzdata/stable-updates 2026e-0+deb13u1 all [upgradable from: 2026c-0+deb13u1]
  • varnish/stable-security 7.7.0-3+deb13u2 amd64 [upgradable from: 7.7.0-3+deb13u1]

Start maintenance window: 26/10/2026 23:00
Stop maintenance window: 27/10/2026 02:00

Managed Server 9: Debian Updates

We will update the following packages to the latest version.

  • chromium-common/oldstable-security 156.0.8078.47-1~deb12u1 amd64 [upgradable from: 155.0.8059.79-1~deb12u1]
  • chromium/oldstable-security 156.0.8078.47-1~deb12u1 amd64 [upgradable from: 155.0.8059.79-1~deb12u1]
  • chromium-sandbox/oldstable-security 156.0.8078.47-1~deb12u1 amd64 [upgradable from: 155.0.8059.79-1~deb12u1]
  • containerd.io/bookworm 2.4.2-3~debian.12~bookworm amd64 [upgradable from: 2.4.2-2~debian.12~bookworm]
  • docker-buildx-plugin/bookworm 0.38.1-1~debian.12~bookworm amd64 [upgradable from: 0.38.0-1~debian.12~bookworm]
  • docker-ce/bookworm 5:29.9.2-1~debian.12~bookworm amd64 [upgradable from: 5:29.9.1-1~debian.12~bookworm]
  • docker-ce-cli/bookworm 5:29.9.2-1~debian.12~bookworm amd64 [upgradable from: 5:29.9.1-1~debian.12~bookworm]
  • docker-ce-rootless-extras/bookworm 5:29.9.2-1~debian.12~bookworm amd64 [upgradable from: 5:29.9.1-1~debian.12~bookworm]
  • docker-compose-plugin/bookworm 5.6.1-1~debian.12~bookworm amd64 [upgradable from: 5.6.0-1~debian.12~bookworm]
  • imagemagick-6-common/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u14 all [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u13]
  • libexpat1/oldstable-security 2.5.0-1+deb12u5 amd64 [upgradable from: 2.5.0-1+deb12u4]
  • libmagickcore-6.q16-6-extra/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u14 amd64 [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u13]
  • libmagickcore-6.q16-6/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u14 amd64 [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u13]
  • libmagickwand-6.q16-6/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u14 amd64 [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u13]
  • libssh-4/oldstable-security 0.10.6-0+deb12u3 amd64 [upgradable from: 0.10.6-0+deb12u2]
  • libssh-gcrypt-4/oldstable-security 0.10.6-0+deb12u3 amd64 [upgradable from: 0.10.6-0+deb12u2]
  • libssl3/oldstable-security 3.0.22-1~deb12u2 amd64 [upgradable from: 3.0.22-1~deb12u1]
  • openjdk-17-jre-headless/oldstable-security 17.0.21+9-1~deb12u1 amd64 [upgradable from: 17.0.20.1+1-1~deb12u1]
  • openssl/oldstable-security 3.0.22-1~deb12u2 amd64 [upgradable from: 3.0.22-1~deb12u1]
  • tzdata/oldstable-security 2026e-0+deb12u1 all [upgradable from: 2026c-0+deb12u1]

Start maintenance window: 26/10/2026 23:00
Stop maintenance window: 27/10/2026 02:00

Mailcow: Changes to Email Alias Forwarding

To improve email deliverability, we will restrict email aliases from forwarding messages to external domains.

Why this change?

Forwarding emails to external providers can cause authentication issues (particularly SPF), resulting in messages being rejected or classified as spam.

What does this mean?

  • Existing aliases will continue to work as usual, unless modified.
  • Forwarding to locally hosted domains remains unaffected.
  • Creating or modifying aliases to forward to external domains will be restricted.
  • External forwarding will remain possible through an alternative method.

For instructions, please see our forwarding guide.

If you have any questions, do not hesitate to contact us.

Start maintenance window: 30/11/2026 23:00
Stop maintenance window: 01/12/2026 02:00

Past Incidents

Friday 12th January 2018

No incidents reported

Thursday 11th January 2018

No incidents reported

Wednesday 10th January 2018

Reboot container nodes to mitigate meltdown vulnerability, scheduled 8 years ago

We will reboot our container virtualisation nodes in order to mitigate the meltdown vulnerability.

Affected servers

  • Generation 3 (Debian 6, PHP 5.3)
  • Generation 4 (Debian 7, PHP 5.4)
  • Generation 5 (Debian 8, PHP 5.6/7.0)

Start Maintenance Window

10.01.2018 00:00

End Maintenance Window

10.01.2018 02:00

Tuesday 9th January 2018

Managed Server Version 5 Updates: php5-cli php5-common php5-curl php5-fpm php5-gd php5-mysql php5-readline, scheduled 8 years ago

php5 5.6.30+dfsg-0+deb8u1 was updated to version 5.6.33+dfsg-0+deb8u1.

Several vulnerabilities were found in PHP

For Debian 8, these problems have been fixed
in version 5.6.33+dfsg-0+deb8u1.
Managed Server Version 4 Updates: graphicsmagick libgdk-pixbuf2.0-0 libgdk-pixbuf2.0-common libgraphicsmagick3, scheduled 8 years ago

graphicsmagick 1.3.16-1.1+deb7u15 was updated to version 1.3.16-1.1+deb7u16.

The NSFocus Security Team discovered multiple security issues in
Graphicsmagick, a collection of image processing tools. Several
heap-based buffer over-reads may lead to a denial-of-service
(application crash) or possibly have other unspecified impact when
processing a crafted file.

For Debian 7 "Wheezy", these problems have been fixed in version
1.3.16-1.1+deb7u16.

gdk-pixbuf 2.26.1-1+deb7u6 was updated to version 2.26.1-1+deb7u7.

It was discovered that there were several integer overflows in
gdk-pixbuf, a library to manipulate images for the GTK graphics toolkit.
This could have led to memory corruption and potential code execution.

For Debian 7 "Wheezy", this issue has been fixed in gdk-pixbuf version
2.26.1-1+deb7u7.
Managed Server Version 5: Add monitoring check for spectre and meltdown vulnerability

With this new check, our monitoring will scan each server for the spectre and meltdown vulnerability daily. This allows us to keep track of all affected systems and make sure won't miss any patches.

As soon as its known when we can expect a fixed kernel version, we will inform you about the corresponding maintenance window.

Monday 8th January 2018

Managed Server: poppler update, scheduled 8 years ago

Package: poppler
Version: 0.26.5-2+deb8u2

Multiple vulnerabilities were discovered in the poppler PDF rendering library, which could result in denial of service or the execution of arbitrary code if a malformed PDF file is processed.

Sunday 7th January 2018

No incidents reported

Saturday 6th January 2018

No incidents reported