Past Incidents

Monday 15th January 2018

Managed Server Version 5: libxml2 update, scheduled 8 years ago

Package: libxml2
CVE ID: CVE-2017-15412
Debian Bug: 883790

libxml2 2.9.1+dfsg1-5+deb8u5 was updated to version 2.9.1+dfsg1-5+deb8u6.

Nick Wellnhofer discovered that certain function calls inside XPath
predicates can lead to use-after-free and double-free errors when
executed by libxml2's XPath engine via an XSLT transformation.

Sunday 14th January 2018

No incidents reported

Saturday 13th January 2018

No incidents reported

Friday 12th January 2018

No incidents reported

Thursday 11th January 2018

No incidents reported

Wednesday 10th January 2018

Reboot container nodes to mitigate meltdown vulnerability, scheduled 8 years ago

We will reboot our container virtualisation nodes in order to mitigate the meltdown vulnerability.

Affected servers

Generation 3 (Debian 6, PHP 5.3)
Generation 4 (Debian 7, PHP 5.4)
Generation 5 (Debian 8, PHP 5.6/7.0)

Start Maintenance Window

10.01.2018 00:00

End Maintenance Window

10.01.2018 02:00

Tuesday 9th January 2018

Managed Server Version 5 Updates: php5-cli php5-common php5-curl php5-fpm php5-gd php5-mysql php5-readline, scheduled 8 years ago

php5 5.6.30+dfsg-0+deb8u1 was updated to version 5.6.33+dfsg-0+deb8u1.

Several vulnerabilities were found in PHP

For Debian 8, these problems have been fixed
in version 5.6.33+dfsg-0+deb8u1.

Managed Server Version 4 Updates: graphicsmagick libgdk-pixbuf2.0-0 libgdk-pixbuf2.0-common libgraphicsmagick3, scheduled 8 years ago

graphicsmagick 1.3.16-1.1+deb7u15 was updated to version 1.3.16-1.1+deb7u16.

The NSFocus Security Team discovered multiple security issues in
Graphicsmagick, a collection of image processing tools. Several
heap-based buffer over-reads may lead to a denial-of-service
(application crash) or possibly have other unspecified impact when
processing a crafted file.

For Debian 7 "Wheezy", these problems have been fixed in version
1.3.16-1.1+deb7u16.

gdk-pixbuf 2.26.1-1+deb7u6 was updated to version 2.26.1-1+deb7u7.

It was discovered that there were several integer overflows in
gdk-pixbuf, a library to manipulate images for the GTK graphics toolkit.
This could have led to memory corruption and potential code execution.

For Debian 7 "Wheezy", this issue has been fixed in gdk-pixbuf version
2.26.1-1+deb7u7.

Managed Server Version 5: Add monitoring check for spectre and meltdown vulnerability

With this new check, our monitoring will scan each server for the spectre and meltdown vulnerability daily. This allows us to keep track of all affected systems and make sure won't miss any patches.

As soon as its known when we can expect a fixed kernel version, we will inform you about the corresponding maintenance window.