Meltdown and Spectre patches from Microsoft impacting ArcGIS Server on Windows Server 2008 R2

Esri have announced today that the recently released Microsoft patches for the widely reported Meltdown and Spectre vulnerabilities are causing significant problems for all versions of ArcGIS Server running on Windows Server 2008 R2 or Windows 7. Later versions of Windows Server appear to be unaffected.

Esri have published the following technical article relating to this issue:

Esri is currently investigating the issue with Microsoft.

Esri will provide patches for all supported version of ArcGIS Server including: 10.3, 10.3.1, 10.4, 10.4.1, 10.5, 10.5.1, and 10.6, as well as 10.2.1 and 10.2.2.

No delivery date for the patches is available at this time, however Esri’s development team is working on this with the highest urgency.

In the interim please do not apply the Windows patches listed in the technical article to any Windows Server 2008 R2 server running ArcGIS Server.  If these Windows patches have been applied then these will have to be uninstalled.

Please follow Esri’s Security Standards & Architecture Team for the most up-to-date information.

A blog outlining Meltdown and Spectre Processor Vulnerabilities includes Esri’s recommendations for ArcGIS deployments and provides a number of references for vulnerability and vendor specific notices.

If you have any questions or concerns, please contact your local Esri distributors support team (for Esri Australia clients, use My Esri, or 1800 447 111)

Got something to say?

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s