Skip to content
Packer
Infrastructure as Code
A tool for building identical machine images across multiple platforms from a single source configuration
Go
·
Latest v1.16.0 · 2d ago
Security brief →
Features
-
Creates identical machine images for multiple platforms in parallel
-
Lightweight and runs on every major operating system
-
Supports various platforms through external plugin integrations
Upgrade now
v1.16.0
Mixed
·
Dependencies
RCE / SSRF
Provenance, HCL2 functions, error handling, deps
Review required
v1.15.4
Mixed
·
Dependencies
Crypto / TLS
Security deps + ARM build + internal upgrades
v1.15.3
Bug fix
·
Minor fixes and improvements.
Full changelog
1.15.3 (April 27, 2026)
BUG FIXES:
- hcp: skip bucket update requests when description and labels already match, avoiding unnecessary updates for existing buckets.
GH-13624
v1.15.2
Security relevant
·
Security fixes
- go-jose/v4 update
- opentelemetry.io/otel/sdk update
- cloud.google.com/go and aws-sdk-go-v2 updates
Notable features
- Enforced provisioner support
Full changelog
1.15.2 (April 21, 2026)
FEATURES:
- provisioner: added support for the enforced provisioner.
GH-13591
SECURITY:
- deps: bump github.com/go-jose/go-jose/v4
GH-13594
- deps: bump go.opentelemetry.io/otel/sdk
GH-13606
- deps: update cloud.google.com/go and aws-sdk-go-v2 related dependencies
GH-13610
INTERNAL:
v1.15.1
New feature
·
Security fixes
- GO-2026-4809 (syft)
- GO-2026-4550 (CIRCL)
- GO-2026-4473 (go-git)
Notable features
- Native SBOM generation for HCP Packer
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
About
Languages
Go
·
HCL
·
Shell
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for ""
⌘K to open
↑↓ navigate
⏎ open
