Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2020:0818-1 Moderate: Cloud-Init Security Update for Issues

suse
Calendar Grey March 31, 2020
Dist Suse Esm H88
SUSE has released a security update for cloud-init that resolves several vulnerabilities. Detailed patch instructions and solutions are included.
An update that solves two vulnerabilities and has one errata is now available

Summary

This update for cloud-init fixes the following security issues: - CVE-2020-8631: Replaced the theoretically predictable deterministic random number generator with the system RNG (bsc#1162937). - CVE-2020-8632: Increased the default random password length from 9 to 20 (bsc#1162936). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2020-818=1 - SUSE CaaS Platform 3.0: To install this update, use the SUSE CaaS Platform Velum dashboard. It will inform you if it detects new updates and let you then trigger

Topics%20covered

Topics Covered

security advisory moderate security issue SUSE random number generator patch instructions cloud-init

References

#1162936 #1162937 #1163178

Cross- CVE-2020-8631 CVE-2020-8632

Affected Products:

SUSE Linux Enterprise Module for Public Cloud 12

SUSE CaaS Platform 3.0

https://www.suse.com/security/cve/CVE-2020-8631.html

https://www.suse.com/security/cve/CVE-2020-8632.html

https://bugzilla.suse.com/1162936

https://bugzilla.suse.com/1162937

https://bugzilla.suse.com/1163178

Announcement ID: SUSE-SU-2020:0818-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue SUSE random number generator patch instructions cloud-init

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here