Open source software Xen warns of high-risk vulnerabilities, multiple cloud services to take action

Many cloud computing services face a brief outage due to the new open source software Xen update to fix the vulnerabilities found. Xen is well known in the cloud computing industry and is developed by the University of Cambridge, where users include mainstream vendors such as Amazon EC2, Aliyun ECS, IBM SoftLayer, Linode and Rackspace Cloud.

By Csdn, Tencent, Tencent Cloud, Tencent Foundation sponsored by the "Open Source technology Conference 2015" (Open source Marvell Conference, referred to as OSTC) will be held in Beijing on March 28, 2015.

Recently, the Open-source software Xen issued a high-risk vulnerability warning, said that because of Xen some of the vulnerabilities, it is recommended that all relevant servers to restart to fix these vulnerabilities.

Xen is well known in the cloud computing industry and is developed by Cambridge University. Users include Amazon EC2, Aliyun ECS, IBM SoftLayer, Linode and Rackspace, and other mainstream manufacturers.

For now, most cloud computing vendors are using server restart solutions, but this will disrupt cloud computing services and make customer business impossible.

It is understood that earlier Amazon announcement to inform customers that about 10% of the server affected need to restart, then the company's technical team to find a hot upgrade, but there are still 0.1% of the server needs to reboot. Given the size of Amazon's cloud computing, this vulnerability obviously has a big impact.

Linode, however, simply used the restart Dafa, and said it was because the vulnerability was high, "typically 2 hours of downtime is normal during a reboot, but there is usually less actual shutdown time." ”

Another cloud-computing vendor, Rackspace, also arranged a restart schedule for the server cluster.

Aliyun, who has just entered the United States, announced on March 9 that it had found a hot upgrade scheme to avoid restarting the server, and that it would no longer be necessary to restart the server, which would not affect the normal development of the client's services on the cloud. (Reprinted from Sina Technology)