CVE patching — 24fire Status

Maintenance
CVE patching
Completed

Aug 7, 2026 2:30 AM CEST – Aug 7, 2026 6:16 AM CEST · resolved in 3 hours 46 minutes

Due to a new CVE affecting nested virtualized VMs, we are disabling this CPU flag on all VMs where it is enabled and restarting the services.

We do not plan to re-enable it due to the current frequency of new escape-to-host CVEs.

We are now beginning the VM reboots.
Planned for: Aug 7, 2026 2:30 AM CEST – Aug 7, 2026 6:15 AM CEST
1. In progress Aug 7, 2026 5:36 AM CEST (1 Monat ago)
  
  The NTT cluster has now been fully updated. Skylink should be updated shortly as well.
2. Completed Aug 7, 2026 6:16 AM CEST (1 Monat ago)
  
  All servers are now up to date with the latest, state-of-the-art technology, ensuring maximum security. We have thus patched all currently known security vulnerabilities and retained features such as nested virtualization.