Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

openSUSE: 2021:4321-1 Moderate Security Update for Docker Software

opensuse
Calendar Grey December 4, 2019
Dist Opensuse Esm H88
The latest patch for openSUSE targets significant vulnerabilities within cloud-init, successfully mitigating a noteworthy security threat.
An update that solves one vulnerability and has 6 fixes is now available.

Description

This update for cloud-init to version 19.2 fixes the following issues:

Security issue fixed:

- CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to

authorized_keys (bsc#1129124).

Non-security issues fixed:

- Short circuit the conditional for identifying the sysconfig renderer

(bsc#1154092, bsc#1142988).

- If /etc/resolv.conf is a symlink, break it. This will avoid netconfig

from clobbering the changes cloud-init applied (bsc#1151488).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2019-2633=1

Package List

- openSUSE Leap 15.1 (x86_64):

cloud-init-19.2-lp151.2.9.1

cloud-init-config-suse-19.2-lp151.2.9.1

cloud-init-doc-19.2-lp151.2.9.1

References

https://www.suse.com/security/cve/CVE-2019-0816.html

https://bugzilla.suse.com/1099358

https://bugzilla.suse.com/1129124

https://bugzilla.suse.com/1136440

https://bugzilla.suse.com/1142988

https://bugzilla.suse.com/1144363

https://bugzilla.suse.com/1151488

https://bugzilla.suse.com/1154092

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2019:2633-1
Rating: moderate
Affected Products: openSUSE Leap 15.1 le.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here