Identified - Dear Squiz Customers,
Squiz has been made aware of CVE-2022-22965, a vulnerability in the Spring Framework that is used in Java versions 9 and above. Java Version 9 and above is used in Funnelback versions 15.20 and above.

Our Security, Product and Platform teams have reviewed the specific CVE and exploitation method, and have determined that Funnelback is currently not vulnerable; the exploit is dependent on the Tomcat application server, which is not used in the Funnelback application as deployed by Squiz. However this may change as further investigations are carried out by the Spring team. Matrix does not use Java and is not affected.

As part of our security response, Squiz is currently developing network level mitigations for the known exploit path, which we will deploy to all Funnelback and Squiz hosted systems as soon as it is tested and passes review. Squiz will also provide details of those mitigation to customers who self host Funnelback solutions if requested. The Funnelback product team will also investigate product updates for affected Funnelback versions.

Squiz will continue to monitor developments for CVE-2022-22965, and if you have any additional questions please don’t hesitate to get in touch with Squiz via email to support@squiz.net

Apr 1, 13:14 AEDT
Squiz Cloud Hosted Instances Operational
Squiz SaaS Hosted Instances Operational
Squiz Funnelback Hosted Instances Operational
Squiz Edge Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Past Incidents
Jun 26, 2022

No incidents reported today.

Jun 25, 2022

No incidents reported.

Jun 24, 2022

No incidents reported.

Jun 23, 2022

No incidents reported.

Jun 22, 2022
Completed - The scheduled maintenance has been completed.
Jun 22, 00:46 AEST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jun 21, 23:00 AEST
Scheduled - Dear Customer,

SQUIZ wishes to notify you that as part of the ongoing Data Centre Improvement Program, scheduled maintenance work will be carried out on the VPN tunnel hosted in Sydney Data Centre that may cause a degradation to your service on VM's hosted in that data centre.

Date: 21st June 2022

Maintenance Window Start: 23:00 AEST

Maintenance Window End: 05:00 AEST (22nd June)

Impact: During the maintenance window network traffic will be moved from the old to new VPN cluster which may cause a minor degradation to your service. Our network engineers will be on standby and in the unlikely event of an issue, the network traffic will be switched back to the existing VPN cluster.

If you have any queries regarding this maintenance, please contact support@squiz.net for more information.

Kind regards,
Squiz Customer Care

May 24, 10:53 AEST
Jun 21, 2022
Postmortem - Read details
Jun 22, 16:13 AEST
Resolved - Squiz has been advised by our 3rd party service provider that a fix has been deployed for the current Major Incident. This has restored service for the subset of affected customers hosted on our SaaS platform. We apologise for this degradation of service and thank you for your patience while we worked on the resolution.

A postmortem will be provided within 72 hours via https://status.squiz.cloud once we have worked with our service provider.

Jun 21, 17:26 AEST
Investigating - Our support teams remain engaged with our upstream provider in resolving the issue.

A further update will be provided via https://status.squiz.cloud in 15 minutes, or earlier if the situation or information changes.

Jun 21, 17:15 AEST
Identified - Squiz teams have identified a third party service as the root cause of the current degradation of service Major Incident. This incident is currently affecting a subset of Squiz customers. We are currently working with the service provider to resolve the issue.

We will provide a further update in ~15 minutes, or if the incident is resolved.

Jun 21, 17:06 AEST
Investigating - Squiz monitoring has detected a degradation of service incident that is affecting customers hosted on our SaaS platform. Multiple Squiz teams are currently investigating.

A further update will be provided via https://status.squiz.cloud in 15 minutes, or earlier if the situation or information changes.

Jun 21, 16:53 AEST
Jun 20, 2022

No incidents reported.

Jun 19, 2022

No incidents reported.

Jun 18, 2022

No incidents reported.

Jun 17, 2022

No incidents reported.

Jun 16, 2022
Postmortem - Read details
Jun 17, 11:33 AEST
Resolved - Squiz teams have deployed a fix for the current Major Incident which has restored service for all impacted customers. We apologise for this degradation of service and thank you for your patience while we worked on the resolution.

A postmortem will be provided via https://status.squiz.cloud .

Jun 16, 10:28 AEST
Identified - Squiz teams have identified the cause of the current degradation of service Major Incident, and are currently working to resolve the issue.

We will provide a further update in ~15 minutes, or once the incident is resolved.

Jun 16, 10:19 AEST
Update - Squiz continue to investigate a degradation of service for our SaaS customers.

A further update will be provided in ~15 minutes.

Jun 16, 10:13 AEST
Update - Squiz monitoring has detected a degradation of service incident that is affecting Squiz SaaS customers. Multiple Squiz teams are currently investigating.

A further update will be provided in ~15 minutes.

Jun 16, 10:01 AEST
Investigating - Squiz monitoring has detected a degradation of service incident that is affecting Squiz Cloud customers. Multiple Squiz teams are currently investigating.

A further update will be provided via https://status.squiz.cloud in 15 minutes, or earlier if the situation or information changes.

Jun 16, 09:50 AEST
Jun 15, 2022
Completed - The scheduled maintenance has been completed.
Jun 15, 05:01 AEST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jun 14, 23:00 AEST
Scheduled - Dear Customer,

SQUIZ wishes to notify you that as part of the ongoing Data Centre Improvement Program, scheduled maintenance work will be carried out on firewalls hosted in Sydney Data Centre that may cause a degradation to your service on VM's hosted in that data centre.

Date: 14th June 2022

Maintenance Window Start: 23:00 AEST

Maintenance Window End: 05:00 AEST (15th June)

Impact: During the maintenance window Squiz network engineers will be performing changes on the PCI hosted subnet in the Sydney Data Centre which may cause a minor degradation to your service. Our network engineers will be on standby and in the unlikely event of an issue, this change will be rolled back immediately.

If you have any queries regarding this maintenance, please contact support@squiz.net for more information.

Kind regards,
Squiz Customer Care

May 24, 10:50 AEST
Jun 14, 2022
Jun 13, 2022

No incidents reported.

Jun 12, 2022

No incidents reported.