[SAC] [abuse #31856] CISA Security issues with OSGEO hosts

[Lance Albertson via RT]

On Mon Jun 21 09:14:39 2021, ramereth wrote:
> On Fri Jun 18 19:18:41 2021, lr at pcorp.us wrote:
> > Lance,
> >
> > OSGeo6 is now upgraded and shows:
> >
> > Distributor ID: Debian
> > Description:    Debian GNU/Linux 9.13 (stretch)
> > Release:        9.13
> > Codename:       stretch
> >
> > I plan to upgrade it in another 6 months or so to buster after I've moved
> > some stuff off of it.  Please let me know if the above change is sufficient
> > for now and if your audit finds anything wrong with it now.
> 
> That's great news! Thanks so much for doing that. I'm not sure if the report
> for today will reflect the update but I'll keep an eye on it and let you know.
> But this should do it. I'll also send you an updated list of the minor issues
> that should be taken care of eventually as well once I see the updated report.

Looks like this was updated in the latest report and no longer shows it being
the outdated OS.

As promised, here's the latest report I have for your hosts. If you're able to
take care of the remaining issues, that would be great!

Thanks-

-- 
Lance Albertson
Director
Oregon State University | Open Source Lab 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: osgeo-2021-06-27.csv
Type: text/csv
Size: 30744 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20210708/a4583d42/attachment-0001.csv>