AWS issues unavoidable reboot schedules with short notice on many EC2 instances
forums.aws.amazon.com
AWS issues unavoidable reboot schedules with short notice on many EC2 instances
1–10 of 160 posts
Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances
#2Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances
#3I'm assuming this is due to fallout from the recent bash security issue?
Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances
#4I'm assuming this is due to fallout from the recent bash security issue?
Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances
#5Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances
#6Earlier quoted context omitted.
Swapping bash should not require reboots. The pending XSA-108 ( http://xenbits.xen.org/xsa/ ) however....
How often do Xen vulnerabilities get embargoed?
Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances
#7Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances
#8They say that its fine to reboot but that there is no guarantee that you will land on an updated host. However, AWS does provide a script to run on Windows machines which should tell you if that particular machine has the issue. I took a quick look at the script and deduced that it is indeed a Xen issue.
Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances
#9Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances
#10They say that its fine to reboot but that there is no guarantee that you will land on an updated host. However, AWS does provide a script to run on Windows machines which should tell you if that particular machine has the issue. I took a quick look at the script and deduced that it is indeed a Xen issue.
It seems like providing a script that identifies if your system is vulnerable to an embargoed XSA would be a violation of the predisclosure list, since it would basically be pointing at what the issue was?