Security update on Meltdown and Spectre - Appsembler

Security update on Meltdown and Spectre

Recently, Google announced two CPU security vulnerabilities called Meltdown and Spectre. These vulnerabilities exist in modern processors across servers, desktops, and mobile devices, and the industry has been working to patch the issue.

The Appsembler team is monitoring this developing situation and applying fixes to our infrastructure as they become available, in order to ensure that your service is uninterrupted and remains as secure as possible. 

Updates:

  • The Meltdown vulnerability requires an operating system update. Appsembler uses Ubuntu, and is in the process of applying the patches provided by Ubuntu for Open edX and Virtual Labs servers. We will keep you posted with further updates.
  • Google has applied fixes to the Google Cloud Platform servers, which Appsembler uses.
  • Patches to the Spectre vulnerability are still in the making, and will be applied as soon as possible when made available by Ubuntu.

Note: awaiting further information about Azure