Re: stretch-pu: package python-certbot/0.10.2-1
control: tags -1 +security
Hi,
On Mon, 15 Jan 2018 18:04:59 -0500 Harlan Lieberman-Berg <hlieberman@debian.org> wrote:
> Package: release.debian.org
> Severity: normal
> Tags: stretch
> User: release.debian.org@packages.debian.org
> Usertags: pu
>
> Hello Release Team,
>
> Due to a security issue in the underlying Let's Encrypt protocol, one of the main methods of getting certificates from Let's Encrypt has been disabled (the TLS-SNI-01 protocol; https://community.letsencrypt.org/t/tls-sni-challenges-disabled-for-most-new-issuance/50316 for more info).
It will happen on February 13th, 2019, so I'm afraid that
9.7 point release would be late for it. It's security issue,
then security advisory maybe help, IMHO.
--
Hideki Yamane <henrich@iijmio-mail.jp>
Reply to: