Is linode affected by the Xen security vuln that is currently unannounced (edit: but embargoed)? AWS is forcing reboots for customers over the next few days.

XSA-108

http://xenbits.xen.org/xsa/

Hard to know if they're affected by a security vulnerability that hasn't been announced. It could be in a component that Linode isn't using, or triggered by a use case that isn't relevant, or for a version of Xen that Linode isn't using...

Clarifying just for you: (Prereleased, but embargoed)

I see that they're on the predisclosure list:
http://www.xenproject.org/security-policy.html

Amazon is already requiring guest reboots... hopefully we can either start seeing similar or some official update as to why Linode is not vulnerable.

Hello,

We have neither a requirement, nor any plans to perform a rebooting of Linode hosts, on any scale, in the near term.

Carry on!

-Chris

Advisory has been released: http://xenbits.xen.org/xsa/advisory-108.html

so is Linode VPS not affected ?

_________________
* Centmin Mod Nginx menu based auto installer (Nginx, PHP-FPM, MariaDB MySQL) :: Centmin Mod LEMP Stack - What's New

ok seems only x86 is vulnerable i believe https://www.webhostingtalk.com/showpost ... stcount=13

_________________
* Centmin Mod Nginx menu based auto installer (Nginx, PHP-FPM, MariaDB MySQL) :: Centmin Mod LEMP Stack - What's New

Only Xen HVM is affected. Linode uses PV.

_________________
/ Peter