Thanks for the massive update job! One of my instances, ttmserver-salt01 (i-00000773.eqiad.wmflabs), was reportedly in "reboot pending" state: I rebooted it manually. If that's related to the security updates, perhaps it's worth checking whether reboots actually completed in all instances. Nemo