Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 9 Stretch: DLA-2455-1 Critical: Packer Code Update For CVE-2020-9283

debian lts
Calendar Grey November 19, 2020
Dist Debian Esm H88
Ubuntu Security Notice USN-4558-1 covers CVE-2021-30523 impacting libjpeg with an urgent fix.
golang-go.crypto was recently updated with a fix for CVE-2020-9283

Summary

CVE-2020-9283

SSH signature verification could cause Panic when given
invalid Public key.

For Debian 9 stretch, this problem has been fixed in version
0.10.2+dfsg-6+deb9u1.

We recommend that you upgrade your packer packages.

For the detailed security status of packer please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/packer

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: packer
Version: 0.10.2+dfsg-6+deb9u1
CVE ID: CVE-2020-9283

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here