Fleet Wide Security Maintenance
Scheduled Maintenance Report for Servebolt
Completed
The scheduled maintenance has been completed.
Posted Jan 06, 2018 - 04:00 CET
Verifying
Verification is currently underway for the maintenance items.
Posted Jan 06, 2018 - 03:59 CET
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Jan 06, 2018 - 01:57 CET
Update
A follow-up maintenance in a week or two is impending, since the situation is still developing.
Posted Jan 04, 2018 - 22:40 CET
Scheduled
The maintenance is being done to mitigate two recently disclosed security threats, CVE-2017-5754 (nicknamed "Meltdown") and CVE-2017-5753, CVE-2017-5715 (nicknamed "Spectre") that affect most modern processor architectures.

These are not remotely exploitable bugs, however if a web host is already compromised by other means, or there is a rouge customer sharing the same server, access could be misused to extract private information such as SSL/TLS keys, login/passwords, session id's and the like. While this is a high severity flaw, we consider the risk of this happening to be low. For customers with dedicated servers this is less of a concern.
Posted Jan 04, 2018 - 22:27 CET