<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>CUE Apache Webserver Owners,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>A critical vulnerability in PHP has been reported and is applicable to a large number of CUE Apache Web Servers. RedHat has released a patch that corrects the problem and due to the severity of the vulnerability, it has been determined that it needs to be delivered promptly. For this reason, all CUE Apache webservers will be updated with this patch and several other, critical and important security patches. Application of these patches will require the web server process to be restarted which will produce a brief interruption in service. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>For the majority of CUE Apache servers, this update will be scheduled to occur overnight, beginning no earlier than 11:50 PM tonight. Systems will install the patches and restart the apache service automatically. Since systems only check for updates every few hours, the actual update time for any particular server is indeterminate, but all should be completed before 5:00 am or so. A follow-up will be done at that time to review systems to insure that everything went as expected.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>For a small list of critical servers, including hallaweb, hallcweb, clasweb, www, and cebaf, these updates will be performed manually at about 5:00 am tomorrow morning. This will be done to insure that the outage to these servers is kept as short as possible and to give me a chance to intervene and quickly correct any problems that may arise (though none are expected).<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>If any significant outage is noted after midnight tonight to any <i>critical, production</i> system, please contact <a href="mailto:wise-page@jlab.org">wise-page@jlab.org</a> if necessary.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>If this schedule poses any significant problems or is cause for concern for some reason, please let me know via email before the scheduled start of the update.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I apologize for any inconvenience and thank you for your cooperation.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Marty Wise<o:p></o:p></p><p class=MsoNormal>Jefferson Lab IT/CNI<o:p></o:p></p><p class=MsoNormal>Newport News, Virginia<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>