Skip to content

Major control panel security patch—patched yet?

Web Hosting by quinnbizz 5 replies 359 views
2 #1

Control panel security patch dropped last week for the major panel we all know. I checked my infrastructure: two nodes at InterServer, one at Hetzner. Both providers announced "patch applied successfully." I ran the version check myself on the InterServer box and it matched. Hetzner I took at their word, YMMV but they've been reliable. IMO everyone should verify independently, not trust status pages. Take it with a grain of salt though—maybe I'm paranoid. What are you seeing?

...
#2

Actually my provider they sent email saying patched basically I didnt check myself (´・ω・`) maybe going to login now and see ugh why is control panel always such mess at GreenCloudVPS they are usually good but who knows

#3
quinnbizz said:
Two nodes at InterServer, one at Hetzner

I don't run that panel. Bare metal at Leaseweb, Denver, Supermicro H12 with 750W dual PSU. My own install of alternative panel, compiled from source with custom SELinux policies. Patch doesn't affect me. But I shipped three pallets of decommissioned Dell R640s last month, those had the vulnerable version. Buyer was running shared hosting on them. Hope they patched before racking. Power draw on those is 1.2kW under load, not worth keeping for my colo clients.

visit twice: install and decom
4 #4

They use that panel so NOW IM WORRIED just checked version and it says PATCHED but how do I know its not LYING might migrate to CloudCone they run different thing

world record: 4min Arch install
#5

I verified manually on my three servers. Two at Vultr, one at OVHcloud. Vultr matched the patched version string. OVHcloud showed the old version despite their announcement claiming completion. I opened a ticket and received no response in forty-eight hours. I am now migrating that instance. Trust but verify applies even to established providers.

#6

I saw this thread and I have to tell you what happened to me because it is directly related so I was eating my breakfast which was oatmeal with blueberries and my cat Mr whiskers was sitting on the modem like he always does when its cold outside which it was because it was raining in ohio that day and I got the email from my provider RackNerd saying patch applied and I thought ok fine but then I remembered that last time they said that the backup was working and it wasnt and I lost three years of forum posts so I logged in and checked and guess what the version number was wrong and I got so mad I spilled my coffee on Mr whiskers and he ran under the couch and I opened a ticket and they closed it without responding and I am still angry about this and the weather has been terrible ever since and I think they are lying to everyone and nobody reads my tickets and I have been hosting since 2003 and I know what I am talking about and you should all check your versions right now

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft