18 February 2016: Emergency reboots to fix multiple critical security issues

This is a past/expired downtime notification. The downtimes specified below have been completed, and remarks/results are given below as well.

Unless otherwise noted, all dates and times are given in Coordinated Universal Time (UTC), with time in 24-hour notation.

Update: The reboots have all been completed.

In the hours following this post, all LizardNet servers (ridley.fastlizard4.org, phazon.fastlizard4.org, and minecraft1.fastlizard4.org) will be rebooted so patches for multiple critical security vulnerabilities can be applied.  The patches include fixes for CVE-2016-0728 (Linux kernel privilege escalation) and CVE-2015-7547 (glibc getaddrinfo stack-based buffer overflow) – more information about these vulnerabilities can be found at their respective links.

Due to the emergency nature of these reboots, they will be occurring almost immediately after this post.  I apologize for not being able to provide more advance notice, and thank you for your understanding.

Servers affected:

phazon.fastlizard4.org
Date and time of downtime start: Immediately
Duration of downtime: Minutes
Status: Completed with no issues!
Partial list of services affected:

  • LizardWiki
  • LizardNet OTRS (emails sent to OTRS during the downtime will be delivered after the downtime concludes)
  • LizardNet Continuous Integration (Jenkins) (Gerrit will not be able to trigger any jobs during the downtime, and they will not be run after the downtime concludes)
  • LizardNet Minecraft dynamic web maps
  • LizardIRC server emerald.lizardirc.org
  • LizardIRC’s website
  • LizardMail services on phazon.fastlizard4.org (emails sent to phazon.fastlizard4.org users during the downtime will be delivered after the downtime concludes)
ridley.fastlizard4.org
Date and time of downtime start: Immediately
Duration of downtime: Minutes
Status: Completed with no issues!
Partial list of services affected:

  • LizardWiki
  • Star Trek Games wiki
  • Wikitroid Skintest
  • LizardNet Code Review (Gerrit)
  • LizardNet Code Explorer (Gitblit)
  • LizardVPN
  • LizardNet Minecraft servers s1, c1, and c2
  • LizardNet’s Teamspeak3 server
  • Rav3nZNC
  • LizardIRC server diamond.lizardirc.org
  • LizardIRC’s website
  • LizardMail services on ridley.fastlizard4.org (emails sent to fastlizard4.org users during the downtime will be delivered after the downtime concludes)
minecraft1.fastlizard4.org
Date and time of downtime start: Immediately
Duration of downtime: Minutes
Status: Completed with no issues!
Services affected:

Advertisements
18 February 2016: Emergency reboots to fix multiple critical security issues

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s