These servers need a reboot for the L1TF vulnerabilities, they've all been upgraded to fixed kernels along with updated microcode. For labvirt/cloudvirt I'll create a separate ticket as more steps are necessary.
[x] cloudcontrol1003.wikimedia.org (jessie) **scheduled 2018-11-19 13:00 UTC with announcement**
[x] cloudcontrol1004.wikimedia.org (jessie)
[x] cloudnet1003.eqiad.wmnet (jessie)
[x] cloudnet1004.eqiad.wmnet (jessie)
[x] cloudservices1003.wikimedia.org (jessie) **scheduled 2018-11-19 13:00 UTC with announcement**
[x] cloudservices1004.wikimedia.org (jessie)
[x] cloudelastic1001.wikimedia.org (stretch) (spare)
[x] cloudelastic1002.wikimedia.org (stretch) (spare)
[x] cloudelastic1003.wikimedia.org (stretch) (spare)
[x] cloudelastic1004.wikimedia.org (stretch) (spare)
[x] labstore2001.codfw.wmnet (jessie) (spare)
[x] labstore2002.codfw.wmnet (jessie) (spare)
[x] labstore2003.codfw.wmnet (jessie)
[x] labstore2004.codfw.wmnet (jessie)
[x] labcontrol1001.wikimedia.org (trusty 3.13) **scheduled 2018-11-19 13:00 UTC with announcement**
[x] labcontrol1002.wikimedia.org (trusty 3.13)
[x] labmon1001.eqiad.wmnet (jessie)
[x] labmon1002.eqiad.wmnet (jessie)
[] labnet1001.eqiad.wmnet (trusty 4.4) **scheduled 2018-11-27 17:30 UTC with pending announcement**
[x] labnet1002.eqiad.wmnet (trusty 4.4)
[x] labpuppetmaster1001.wikimedia.org (jessie)
[x] labpuppetmaster1002.wikimedia.org (jessie)
[x] labservices1001.wikimedia.org (trusty 3.13) **scheduled 2018-11-19 13:00 UTC with announcement**
[x] labservices1002.wikimedia.org (trusty 3.13)
[] labstore1003.eqiad.wmnet (trusty 3.13) (replacement WIP, probably best to skip the reboot and directly move to the new replacement)
[] labstore1006.wikimedia.org (jessie)
[] labstore1007.wikimedia.org (jessie)
(labsdbXXXX servers in subtasks for additional coordination with other folks)