SA-CORE-2018-005, CVE-2018-14773: Infrastructure Mitigation

Incident Report for amazee.io

Resolved

Mitigations have been rolled out to our Lagoon clusters and all of the legacy platform.

Posted Aug 01, 2018 - 23:38 UTC

Update

We are continuing to work on a fix for this issue.

Posted Aug 01, 2018 - 23:13 UTC

Update

We are continuing to work on a fix for this issue.

Posted Aug 01, 2018 - 23:00 UTC

Identified

We are working on an infrastructure mitigation for SA-CORE-2018-005 (https://www.drupal.org/SA-CORE-2018-005), also known as CVE-2018-14773 (https://symfony.com/blog/cve-2018-14773-remove-support-for-legacy-and-risky-http-headers)

Posted Aug 01, 2018 - 22:25 UTC

This incident affected: General (Lagoon API, Deployment Infrastructure, Nameservers).