[SAC] [abuse #31856] CISA Security issues with OSGEO hosts

[Regina Obe]

Thanks I'll review these this coming week and will try to address.

> -----Original Message-----
> From: Sac [mailto:sac-bounces at lists.osgeo.org] On Behalf Of Lance
> Albertson via RT
> Sent: Thursday, July 8, 2021 8:33 PM
> To: sac at lists.osgeo.org
> Cc: rootmail-students at osuosl.org
> Subject: [SAC] [abuse #31856] CISA Security issues with OSGEO hosts
> 
> On Mon Jun 21 09:14:39 2021, ramereth wrote:
> > On Fri Jun 18 19:18:41 2021, lr at pcorp.us wrote:
> > > Lance,
> > >
> > > OSGeo6 is now upgraded and shows:
> > >
> > > Distributor ID: Debian
> > > Description:    Debian GNU/Linux 9.13 (stretch)
> > > Release:        9.13
> > > Codename:       stretch
> > >
> > > I plan to upgrade it in another 6 months or so to buster after I've
> > > moved some stuff off of it.  Please let me know if the above change
> > > is sufficient for now and if your audit finds anything wrong with it now.
> >
> > That's great news! Thanks so much for doing that. I'm not sure if the
> > report for today will reflect the update but I'll keep an eye on it and let you
> know.
> > But this should do it. I'll also send you an updated list of the minor
> > issues that should be taken care of eventually as well once I see the
> updated report.
> 
> Looks like this was updated in the latest report and no longer shows it being
> the outdated OS.
> 
> As promised, here's the latest report I have for your hosts. If you're able to
> take care of the remaining issues, that would be great!
> 
> Thanks-
> 
> --
> Lance Albertson
> Director
> Oregon State University | Open Source Lab