Live data from Hacker News

AWS issues unavoidable reboot schedules with short notice on many EC2 instances

forums.aws.amazon.com

1–10 of 160 posts

Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances

#4

I'm assuming this is due to fallout from the recent bash security issue?

That's unlikely. You can update bash without any restarts. This sounds like an architecture change / global hardware (firmware?) update / kernel upgrade which doesn't allow nice migration to/from the hosts.

Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances

#5
post #3

I'm assuming this is due to fallout from the recent bash security issue?

Swapping bash should not require reboots. The pending XSA-108 ( http://xenbits.xen.org/xsa/ ) however....

How often do Xen vulnerabilities get embargoed?

Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances

#6
post #5
post #3

Earlier quoted context omitted.

Swapping bash should not require reboots. The pending XSA-108 ( http://xenbits.xen.org/xsa/ ) however....

How often do Xen vulnerabilities get embargoed?

If you look at the public release column you'll see the following date: 2014-10-01 12:00. I'm not sure when the vulnerability was added to the list or what timezone that is referring to but it looks like we'll find out what it is in a couple days.

Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances

#7
They say that its fine to reboot but that there is no guarantee that you will land on an updated host. However, AWS does provide a script to run on Windows machines which should tell you if that particular machine has the issue. I took a quick look at the script and deduced that it is indeed a Xen issue.

Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances

#8
post #7

They say that its fine to reboot but that there is no guarantee that you will land on an updated host. However, AWS does provide a script to run on Windows machines which should tell you if that particular machine has the issue. I took a quick look at the script and deduced that it is indeed a Xen issue.

It seems like providing a script that identifies if your system is vulnerable to an embargoed XSA would be a violation of the predisclosure list, since it would basically be pointing at what the issue was?

Re: AWS issues unavoidable reboot schedules with short notice on many EC2 instances

#10
post #8
post #7

They say that its fine to reboot but that there is no guarantee that you will land on an updated host. However, AWS does provide a script to run on Windows machines which should tell you if that particular machine has the issue. I took a quick look at the script and deduced that it is indeed a Xen issue.

It seems like providing a script that identifies if your system is vulnerable to an embargoed XSA would be a violation of the predisclosure list, since it would basically be pointing at what the issue was?

How does one bit of information (vulnerable / not vulnerable) tell you what the vulnerability is?
Post reply on HN