Variant 3: rogue data cache load (CVE-2017-5754) - meltdown
Vulnerable : NO
Note: Meltdown (CVE-2017-5754) does not affect ESXi because ESXi does not run untrusted user mode code.
We will have to apply updates on different machines
All of this will be done in 2 phases :
- Phase 1 : Security updates in the customer side
- Phase 2 : Security updates in the OVH side
------
Phase 1 will update all machine linked to customer infrastructures :
We need to upgrade all the ESXI. Proceeding this action will require a shutdown of all our desktops.
After this upgrade, we will reboot the desktops and force a Windows update on it.
Worst case scenario, the desk will be unreachable for about 2 hours. Please find below an estimation of the date / time of the upgrades per pool.
Update of the Esxi :
8/01/2017 , 6 AM - 8 AM
winadv-48
wingpu-37
wingpu-39
wingpu-36
winadv-43
winadv-47
winadv-46
wingpu-17
winadv-42
wingpu-38
12/01/2017 , 6 AM - 8 AM
winbase-28
winbase-24
winbase-12
winbase-26
winbase-14
winbase-23
winbase-22
winbase-2
The update of the ESXI are DONE
The 19 th of January ( 2018) we are going to upgrade the VCSA at 7.AM . A brief reboot is necessary..
------
Phase 2 will update all machines linked to management infrastructure in the OVH side.
During this time, the management interface of your infrastructure won't be available.
We need to update all the administration servers, which will lead to a temporary impossibility to log into the infrastructure’s Desktops.
The exact schedule of this operation hasn’t yet been decided. We’ll keep you in touch as soon as possible.
Please be ensured that OVH teams are fully mobilized to mitigate the impacts of this emergency intervention.
Update(s):
Date: 2018-02-28 15:24:56 UTC Phase 2 is done, all CA and EU infrastructure are up to date.
The cloud Desktop team
Date: 2018-02-20 15:01:21 UTC Phase 2 is almost done.
For the CDI owner in EU :
The next update will be on the 26 February 2018 at 8 PM and on the 1st March 2018 at 5 AM. You'll receive an email to notify you of the scheduling.
The Cloud Desktop management infrastructure will be updated on the 1st March 2018 at 5 AM.
The Cloud Desktop Team.
Date: 2018-01-19 08:15:12 UTC Phase 1 is done.
Still working on phase 2 !
PLease, feel free to ask if you have some questions (cdi@ml.ovh.net)
Date: 2018-01-17 13:30:40 UTC We are going to upgrade the VCSA this friday (19/01/2018) at 7. AM A reboot will be necessary.