Stay Secure with the Latest Linux Advisories

security advisorysecurity issueupdate

Debian 9 Stretch: DLA-2455-1 Critical: Packer Code Update For CVE-2020-9283

golang-go.crypto was recently updated with a fix for CVE-2020-9283. This in turn requires all packages that use the affected code to be recompiled in order to pick up the security fix. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2455-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Brian May November 19, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : packer Version : 0.10.2+dfsg-6+deb9u1 CVE ID : CVE-2020-9283 golang-go.crypto was recently updated with a fix for CVE-2020-9283. This in turn requires all packages that use the affected code to be recompiled in order to pick up the security fix. CVE-2020-9283 SSH signature verification could cause Panic when given invalid Public key. For Debian 9 stretch, this problem has been fixed in version 0.10.2+dfsg-6+deb9u1. We recommend that you upgrade your packer packages. For the detailed security status of packer please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/packer Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu Security Notice USN-4558-1 covers CVE-2021-30523 impacting libjpeg with an urgent fix.. Debian Security, Packer Update, CVE-2020-9283, Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Nov 19, 2020 •Critical Debian LTS