OVHcloud Bare Metal Cloud Status

Current status
Legend
  • Operational
  • Degraded performance
  • Partial Outage
  • Major Outage
  • Under maintenance
FS#12520 — glibc updates (CVE-2015-0235)
Scheduled Maintenance Report for Bare Metal Cloud
Completed
In order to fix the recently disclosed glibc vulnerability (see https://access.redhat.com/articles/1332213 for more details) our distribution images are being updated.
All Linux systems are affected.
Please make sure to update your existing installations as soon as possible:
- OVH Release 3, CentOS, Fedora: use \"yum update\" to update your system, then restart all services or reboot the server
- Debian, Ubuntu: use \"apt-get update; apt-get upgrade\" to update your system, then restart all services or reboot the server
- Ubuntu Desktop: use \"sudo apt-get update; sudo apt-get upgrade\" to update your system, then restart all services or reboot the server
- OVH Release 2: a patch has been prepared and is being tested before rollout.

To test if the vulnerability is fixed on your system you can download and compile \"GHOST.c\" as follows:
# wget ftp://ftp.ovh.net/made-in-ovh/security/GHOST.c
# gcc -o GHOST GHOST.c
# ./GHOST

Update(s):

Date: 2015-02-04 15:11:04 UTC
################ OVH Release 2 ################
Release 2.36 is now considered stable. The patch is now available here:
ftp://ftp.ovh.net/made-in-ovh/release/patch-2.35-2.36.sh

and can be executed either its own or using the \"patch-all\" script (ftp://ftp.ovh.net/made-in-ovh/release/patch-all.sh)

Date: 2015-01-30 10:59:04 UTC

################ OVH Release 2 ################

The patch for OVH Release 2 (based on Gentoo) has been tested
internally, and is now publicly available here:
ftp://ftp.ovh.net/made-in-ovh/release/beta/patch-2.35-2.36.sh

Please note that it has not yet been mass tested. As of now, we advise
against using it on mission-critical servers.

Please also take note that the OVH Release 2 is nearing its end of
life, and support as well as security updates might be limited in
future.
Posted Jan 30, 2015 - 10:54 UTC