Mitigation of UAA Vulnerability
Scheduled Maintenance Report for anynines
Completed
We have successfully upgraded Cloud Foundry. Please do not hesitate to contact us if you experience anything out of the ordinary.

Greetings
Sven Schmidt
Posted May 05, 2017 - 09:42 CEST
In progress
Greetings,

we apologize for the delay. We are now starting the update. Due to the instances just rebooting, we still expect that the update will be finished before the end of the original Maintenance window.

Greetings
Sven Schmidt
Posted May 05, 2017 - 09:15 CEST
Scheduled
Greetings,

due to a high severity Vulnerability in the User Authentication server, we are doing an out of order upgrade of Cloud Foundry tomorrow. Due to the short announcement window, we will only do reboots of the VMs, compared to the usual recreation, speeding up the update considerably. We do not expect downtimes, nor do we plan to restart the Application Hosts, so apps will not be restart.

Greetings
Sven Schmidt

https://www.cloudfoundry.org/cve-2017-4974/
Posted May 04, 2017 - 14:58 CEST