High ELSA-2023-12299 1 CVE

Important: cloud-init security update (Oracle Linux 9)

Published Apr 27, 2023 · Updated Apr 27, 2023

Ecosystem: Oracle Linux

Summary

[22.1-7.0.3.el9_1]
- Fix log file permission [Orabug: 35302969]

[22.1-7.0.2.el9_1]
- Fix CVE-2023-1786 [Orabug: 35302969]

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	cloud-init	0:22.1-7.0.3.el9_1

Vulnerabilities 1

Medium 5.5

CVE-2023-1786

sensitive data exposure in cloud-init logs

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

Canonical cloud-init cloud-init cloud-init Debian Ubuntu Azure Linux Alpine

Apr 26, 2023