Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-0816: A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'. 1680165: CVE-2019-0816 cloud-init: extra ssh keys added to authorized_keys on the Azure platform
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | cloud-init | 0:19.3-2.amzn2 |
Vulnerabilities 1
-
Unscored —
A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-0816.html