--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-837115524e
2017-03-23 12:06:37.066728
--------------------------------------------------------------------------------

Name        : cloud-init
Product     : Fedora 25
Version     : 0.7.8
Release     : 6.fc25
URL         : https://launchpad.net/cloud-init
Summary     : Cloud instance init scripts
Description :
Cloud-init is a set of init scripts for cloud instances.  Cloud instances
need special scripts to run during initialization to retrieve and install
ssh keys and to let the user run various scripts.

--------------------------------------------------------------------------------
Update Information:

This update fixes a systemd service ordering issue in cloud-init and backports a
fix for a [security issue](https://bugs.launchpad.net/cloud-init/+bug/1638312)
in which instances run in EC2 write IAM instance profile credentials to disk.
To work around the security issue without updating cloud-init, wait at least six
hours between creating a bundle or an EBS snapshot and registering that as a
machine image.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1400249 - Wrong systemd unit in cloud-init
        https://bugzilla.redhat.com/show_bug.cgi?id=1400249
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade cloud-init' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora 25: cloud-init Security Update

March 23, 2017
This update fixes a systemd service ordering issue in cloud-init and backports a fix for a [security issue](https://bugs.launchpad.net/cloud-init/+bug/1638312) in which instances r...

Summary

Cloud-init is a set of init scripts for cloud instances. Cloud instances

need special scripts to run during initialization to retrieve and install

ssh keys and to let the user run various scripts.

Update Information:

This update fixes a systemd service ordering issue in cloud-init and backports a fix for a [security issue](https://bugs.launchpad.net/cloud-init/+bug/1638312) in which instances run in EC2 write IAM instance profile credentials to disk. To work around the security issue without updating cloud-init, wait at least six hours between creating a bundle or an EBS snapshot and registering that as a machine image.

Change Log

References

[ 1 ] Bug #1400249 - Wrong systemd unit in cloud-init https://bugzilla.redhat.com/show_bug.cgi?id=1400249

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade cloud-init' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
Name : cloud-init
Product : Fedora 25
Version : 0.7.8
Release : 6.fc25
URL : https://launchpad.net/cloud-init
Summary : Cloud instance init scripts

Related News