Thursday 4th January 2018

Scheduled maintenance to address recent security vulnerabilities, scheduled 4 months ago

You may have heard recently about two large hardware vulnerabilities called Meltdown and Spectre which have sent the IT industry scrambling to take corrective actions. Magento Commerce takes these vulnerabilities seriously and intends to ensure our cloud infrastructure is protected. To that end, we are planning to deploy patches over the next few days to remedy this situation.

We’ll be applying these updates in the following maintenance windows, starting today (01/04/2018) at 10pm PST.

US based

  • Maintenance window for all integration environments and Starter production environments - 1/4/18 10pm PST to 1/5/18 6am PST.
  • Maintenance windows for Pro production environments - 1/8/15 to 1/15/15 between 10pm PST and 4pm PST each day.

APAC/EMEA based

  • Maintenance window for all integration environments and Starter production environments - 1/5/18 8am PST to 1/5/18 4pm PST.
  • Maintenance windows for Pro production environments - 1/8/15 to 1/15/15 between 8am PST to 4pm PST.

Potential impact to your environments

  • Integration environments and Starter production environments - each environment may experience up to 30 minutes of downtime within the maintenance windows listed above, during which all GUI, CLI, and SSH access will be unavailable.
  • Pro production environments – no downtime is expected and all services will continue to be available as per usual. There’s a small chance for unexpected downtime but it should be within the 99.99% service availability guarantee offered with the Pro plan.

We’ll start the patching with the Integration environments and the Starter production environments first as they are more susceptible to potential malicious code given they run on shared servers. This will be followed by Pro customers’ production servers, as they are isolated for each customer, which reduces the security risk significantly.

We highly recommend that you ensure that your teams are not conducting any critical operations in the affected environments during these maintenance windows. If unavoidable, please keep work to a minimum and notify Magento support in advance.

As a reminder, you can reach support through our support portal.