WHM Update Messages - How soon must we act?

JohnnyBgood

Member
Feb 6, 2015
20
0
51
cPanel Access Level
Root Administrator
Hi all,

I have kernel care on my server (and I assume it's installed correctly, so updates are not needed for kernel updates)...

But say I get one of those yellow banner update message in my WHM.

The message usually ends with "UPDATE NOW"

How literal is this? Is this a case of - no matter what time - update your server, it's open to crazy hacking attempts?

Or does it mean, wait until your site traffic is at a low, then reboot.

Thanks so much!
 

ZenHostingTravis

Well-Known Member
PartnerNOC
May 22, 2020
244
80
28
Australia
cPanel Access Level
Root Administrator
Hi @JohnnyBgood,

The latter.

Perhaps have a maintenance window during offpeak hours, let you customers know about it and perform the updates (incl any necessary reboots) at that time.

cPanel encourages you to install tools such as logwatch, chkrootkit, rkhunter and tripwire (my favourite), too and I'd also recommend having a server management company or technician review your server's security and harden it, where possible. For example, change the default SSH port, harden the /tmp/ directory and so on. Some of the server management companies will provide you with a list of what they will do.

Hope that helps.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
4,357
546
273
cPanel Access Level
Root Administrator
In addition to the kernel itself, there are sometimes other tools that require a server reboot to load the new version. You may have received the email about processes running outdated executables in the past, as that would be one example.

There's no immediate danger in putting this off until a convenient time - just perform that work whenever it is best for your users and server.