We need to patch and reboot all labvirts and VMs, as soon as proper packages are available.
----
https://lists.wikimedia.org/pipermail/cloud/2018-January/000167.html
Patch tracking:
* Debian: https://security-tracker.debian.org/tracker/CVE-2017-5754
* Ubuntu: https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-5754.html
Docs:
https://wikitech.wikimedia.org/wiki/Portal:Cloud_VPS/Admin/Maintenance#Labvirt_reboot_checklist
Labvirts to update (All Trusty currently on 4.4.0-81-generic)
[] labtestvirt2001.codfw.wmnet
[] labtestvirt2002.codfw.wmnet
[] labtestvirt2003.codfw.wmnet
[] labvirt1001.eqiad.wmnet
[] labvirt1002.eqiad.wmnet
[] labvirt1003.eqiad.wmnet
[] labvirt1004.eqiad.wmnet
[] labvirt1005.eqiad.wmnet
[] labvirt1006.eqiad.wmnet
[] labvirt1007.eqiad.wmnet
[] labvirt1008.eqiad.wmnet
[] labvirt1009.eqiad.wmnet
[] labvirt1010.eqiad.wmnet
[] labvirt1011.eqiad.wmnet
[] labvirt1012.eqiad.wmnet
[] labvirt1013.eqiad.wmnet
[] labvirt1014.eqiad.wmnet
[] labvirt1015.eqiad.wmnet
[] labvirt1016.eqiad.wmnet
[] labvirt1017.eqiad.wmnet
[] labvirt1018.eqiad.wmnet
[] labvirt1019.eqiad.wmnet
[] labvirt1020.eqiad.wmnet
[] instances of projects (see https://tools.wmflabs.org/openstack-browser/project/)
**Related**
Prod {T184256}
PCID https://groups.google.com/forum/m/#!topic/mechanical-sympathy/L9mHTbeQLNU
PCID & INVPCID https://lwn.net/Articles/671299/