Debian alert DLA-2484-1 (python-certbot)

From:
             
 
Utkarsh Gupta <utkarsh@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 2484-1] python-certbot - switch to ACMEv2 API
Date:
             
 
Wed, 09 Dec 2020 02:14:08 +0530
Message-ID:
             
 
 <CAPP0f96L+KU8SR8=Ex9sCoT=OxsP972Er=7RM-EBO0ffwgtM3w@mail.gmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -----------------------------------------------------------------------
Debian LTS Advisory DLA-2484-1              debian-lts@lists.debian.org
https://www.debian.org/lts/security/                      Utkarsh Gupta
December 07, 2020                           https://wiki.debian.org/LTS
- -----------------------------------------------------------------------

Package        : python-certbot
Version        : 0.28.0-1~deb9u3
Debian Bug     : 969126

Let's Encrypt's ACMEv1 API is deprecated and in the process of being
shut down. Beginning with brownouts in January 2021, and ending with
a total shutdown in June 2021, the Let's Encrypt APIs will become
unavailable. To prevent users having disruptions to their certificate
renewals, this update backports the switch over to the ACMEv2 API.

For Debian 9 stretch, this problem has been fixed in version
0.28.0-1~deb9u3.

We recommend that you upgrade your python-certbot packages.

For the detailed security status of python-certbot please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/python-certbot

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=K+p+
-----END PGP SIGNATURE-----