shield Security update for cloud-init

SUSE-SLE-Module-Public-Cloud-12-2023-2164

This update for cloud-init contains following fixes: - CVE-2021-3429: Do not write the generated password to the log file. (bsc#1184758) - CVE-2023-1786: Do not expose sensitive data gathered from the CSP. (bsc#1210277) Other fixes: - Change log file creation mode to 640. (bsc#1183939) - Write proper bonding option configuration for SLE/openSUSE. (bsc#1184085) - Do not including sudoers.d directory twice. (bsc#1181283)

• Release Date
  May 10 2023
• References
  Bugzilla: 1210277, 1181283, 1184758, 1183939, 1184085
  CVEs: CVE-2023-1786, CVE-2021-3429
• Type
  security
• Severity
  moderate

cloud_download Downloads

Public Cloud Module 12 ppc64le

• Packages
  cloud-init
  Cloud node initialization tool

  20.2-37.57.1 lock rpm lock src

  cloud-init-config-suse
  Configuration file for Cloud node initialization tool

  20.2-37.57.1 lock rpm

Public Cloud Module 12 s390x

• Packages
  cloud-init
  Cloud node initialization tool

  20.2-37.57.1 lock rpm lock src

  cloud-init-config-suse
  Configuration file for Cloud node initialization tool

  20.2-37.57.1 lock rpm

Public Cloud Module 12 aarch64

• Packages
  cloud-init
  Cloud node initialization tool

  20.2-37.57.1 lock rpm lock src

  cloud-init-config-suse
  Configuration file for Cloud node initialization tool

  20.2-37.57.1 lock rpm

Public Cloud Module 12 x86_64

• Packages
  cloud-init
  Cloud node initialization tool

  20.2-37.57.1 lock rpm lock src

  cloud-init-config-suse
  Configuration file for Cloud node initialization tool

  20.2-37.57.1 lock rpm