Scheduled Maintenance – Kernel Security Update (CVE-2026-98432)

As part of our ongoing security maintenance, we recently deployed emergency mitigation updates over the weekend to address the Linux kernel vulnerability CVE-2026-98432.

An official vendor kernel update, 4.18.0-553.182.1.el8_10.x86_64, has now been released and supersedes the temporary testing kernel that was deployed as part of the emergency response. To ensure systems remain fully protected and up to date, we will be applying this latest security update across affected managed servers.

Maintenance Window:
02 November 2026, from 21:00 GMT

During this maintenance window, affected servers will require a reboot for the update to take effect. Customers may experience a brief interruption to service while the update is installed and systems are restarted.

Customers with unmanaged servers are responsible for applying this update to their own systems. We strongly recommend installing the latest vendor-supplied kernel update as soon as possible to ensure continued protection against CVE-2026-98432.

We apologise for any inconvenience caused and appreciate your understanding as we continue to prioritise the security, stability, and reliability of our services.

Further updates will be provided here as the maintenance progresses.

—————————————————————————————————————–

WebBuilder update: temporary widget restrictions

The WebBuilder application and its most popular widgets have now been patched. A number of remaining widgets have been temporarily disabled while further patching is completed.

During this time, affected widgets will not appear on published websites or within the WebBuilder editor. The most frequently used widgets have already been updated and remain available.

We expect the temporarily disabled widgets to be re-enabled progressively over the next seven days, once their patches have been applied.