WHM Update Messages - How soon must we act?

[JohnnyBgood]

Hi all,

I have kernel care on my server (and I assume it's installed correctly, so updates are not needed for kernel updates)...

But say I get one of those yellow banner update message in my WHM.

The message usually ends with "UPDATE NOW"

How literal is this? Is this a case of - no matter what time - update your server, it's open to crazy hacking attempts?

Or does it mean, wait until your site traffic is at a low, then reboot.

Thanks so much!

 

[ZenHostingTravis]

Hi @JohnnyBgood,

The latter.

Perhaps have a maintenance window during offpeak hours, let you customers know about it and perform the updates (incl any necessary reboots) at that time.

cPanel encourages you to install tools such as logwatch, chkrootkit, rkhunter and tripwire (my favourite), too and I'd also recommend having a server management company or technician review your server's security and harden it, where possible. For example, change the default SSH port, harden the /tmp/ directory and so on. Some of the server management companies will provide you with a list of what they will do.

Hope that helps.

 

[cPRex]

In addition to the kernel itself, there are sometimes other tools that require a server reboot to load the new version. You may have received the email about processes running outdated executables in the past, as that would be one example.

There's no immediate danger in putting this off until a convenient time - just perform that work whenever it is best for your users and server.