Forem Self-Host Security Updates for CVE-2021-33909 (“Sequoia”) and CVE-2021-33910

Part of running your own Forem is keeping the Forem Software and the underlying Fedora CoreOS server up to date.

Fedora CoreOS has rolled out updates to address the recent kernel [1] and systemd [2] vulnerabilities and we urge all Self-Host users to update to Fedora CoreOS 34.20210626.3.2 or greater. You can do this by accessing your Forem Self-Host server via SSH and running the following commands:

sudo rpm-ostree upgrade --bypass-driver
sudo systemctl reboot

This will update your Fedora CoreOS install to 34.20210626.3.2 and reboot it. It will also cause a bit of downtime for your Forem.

Note: If you are launching a new Self-Host Forem with one of our provider playbooks it should use the most current Fedora CoreOS Stable version, so you do not need to do anything as long as your FCOS version is 34.20210626.3.2 or greater.