High ELSA-2023-12298 1 CVE

Important: cloud-init security update (Oracle Linux 8)

Published Apr 27, 2023 · Updated Apr 27, 2023

Ecosystem: Oracle Linux

Summary

[22.1-6.0.4.el8_7.2]
- Fix log file permissions [Orabug: 35302985]

[22.1-6.0.3.el8_7.2]
- Fix CVE-2023-1786 [Orabug: 35302985]

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	cloud-init	0:22.1-6.0.4.el8_7.2

Vulnerabilities 1

Medium 5.5

CVE-2023-1786

sensitive data exposure in cloud-init logs

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

Canonical cloud-init cloud-init cloud-init Debian Ubuntu Azure Linux Alpine

Apr 26, 2023