Red Hat Security Advisory: cloud-init security, bug fix, and enhancement update

Fixed packages 1

Vulnerabilities 1

• Medium 5.5
  CVE-2023-1786

  sensitive data exposure in cloud-init logs

  Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

  Canonical cloud-init cloud-init cloud-init Debian Ubuntu Azure Linux Alpine
  Apr 26, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2179017
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2182948
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2188388
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2190079
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6371.json
• report
  https://access.redhat.com/security/cve/CVE-2023-1786
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1786
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1786