Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Warning

INCIDENT NOTIFICATION

No incidents at this moment.

Info

MAINTENANCE NOTIFICATION

22-12-21; OpenStack upgrades finished, Log4J vulnerability patched

We have completed our OpenStack upgrades. We are now running on the latest version of OpenStack and can confirm that our systems are running smoothly.

Log4J update
In the past weeks a new priority has been added to our attention list; the Log4J vulnerabilities.

You might have been reading about this vulnerability in the press or on security blogs like the one from Google; Understanding the Impact of Apache Log4j Vulnerability  

Onetrail uses this software in various places and has extensively reviewed and researched this issue.

As a solution we updated all the relevant projects to the latest Log4J version 2.17. In addition, we have implemented a proxy rule to scan and if required block incoming traffic from the Internet.
Info

IN SHORT

To comply with our ISO27001 certification standards we patch our systems regularly.


Dear customer,

As we are striving to keep our systems as safe as possible we have to patch our systems.

We planned this every third Monday of the month: our platform will be down between 18.30 and 23:00.

To be as informative as possible we've planned this for the whole year 2024:


DayDateTime
Monday17-jun-2024 18:30-23:00
Monday15-jul-2024 18:30-23:00
Monday19-Aug-2418:30-23:00
Monday16-Sep-2418:30-23:00
Monday21-Oct-2418:30-23:00
Monday18-Nov-2418:30-23:00
Monday16-Dec-2418:30-23:00
Monday20-Jan-2518:30-23:00
Monday17-Feb-2518:30-23:00
Monday17-Mar-2518:30-23:00
Monday21-Apr-2518:30-23:00


Want to know more?
If you have any questions please contact Onetrail Support during our business hours, we are happy to help you.

Onetrail Support
+31 30 697 32 85
Servicedesk

Kind regards,

The Onetrail team

MAINTENANCE NOTIFICATION

To keep up with the highest security standards Onetrail has changed the number of SFTP cipher suites on our Production TPN- platform.

On the environments we will no longer support these two SFTP cipher suites:

  *   arcfour128
  *   arcfour256

To keep your systems running smoothly make sure you use one of the following supported SFTP cipher suites that remain applicable and secured:  *   aes256-ctr
  *   aes192-ctr
  *   aes128-ctr
  *   aes256-cbc
  *   aes192-cbc
  *   aes128-cbc
  *   blowfish-ctr
  *   blowfish-cbc
No special maintenance work is planned. Regular updates are performed during our weekly maintenance window every Monday from 19.00 till 21.00 hour CET.