Описание
Security update for cloud-init
This update for cloud-init fixes the following issues:
Security issue fixed:
- CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorized_keys (bsc#1129124).
Non-security issues fixed:
-
Add cloud-init-renderer-detect.patch (bsc#1154092, bsc#1142988)
- Short curcuit the conditional for identifying the sysconfig renderer. If we find ifup/ifdown accept the renderer as available.
-
Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
- If /etc/resolv.conf is a symlink break it. This will avoid netconfig from clobbering the changes cloud-init applied.
-
Update to cloud-init 19.2 (bsc#1099358)
- Remove, included upstream
- cloud-init-detect-nova.diff
- cloud-init-add-static-routes.diff
- net: add rfc3442 (classless static routes) to EphemeralDHCP (LP: #1821102)
- templates/ntp.conf.debian.tmpl: fix missing newline for pools (LP: #1836598)
- Support netplan renderer in Arch Linux [Conrad Hoffmann]
- Fix typo in publicly viewable documentation. [David Medberry]
- Add a cdrom size checker for OVF ds to ds-identify [Pengpeng Sun] (LP: #1806701)
- VMWare: Trigger the post customization script via cc_scripts module. [Xiaofeng Wang] (LP: #1833192)
- Cloud-init analyze module: Added ability to analyze boot events. [Sam Gilson]
- Update debian eni network configuration location, retain Ubuntu setting [Janos Lenart]
- net: skip bond interfaces in get_interfaces [Stanislav Makar] (LP: #1812857)
- Fix a couple of issues raised by a coverity scan
- Add missing dsname for Hetzner Cloud datasource [Markus Schade]
- doc: indicate that netplan is default in Ubuntu now
- azure: add region and AZ properties from imds compute location metadata
- sysconfig: support more bonding options [Penghui Liao]
- cloud-init-generator: use libexec path to ds-identify on redhat systems (LP: #1833264)
- tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
- Allow identification of OpenStack by Asset Tag [Mark T. Voelker] (LP: #1669875)
- Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
- run-container: centos: comment out the repo mirrorlist [Paride Legovini]
- netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
- freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
- freebsd: ability to grow root file system [Gonéri Le Bouder]
- freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
- Azure: Return static fallback address as if failed to find endpoint [Jason Zions (MSFT)]
- Remove, included upstream
-
Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
-
Update to version 19.1 (bsc#1136440, bsc#1129124)
Список пакетов
Image SLES12-SP4-Azure-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP4-EC2-HVM-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP4-OCI-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP4-SAP-Azure
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP4-SAP-Azure-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP4-SAP-EC2-HVM
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP4-SAP-EC2-HVM-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP4-SAP-OCI-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-Azure-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-Azure-Basic-On-Demand
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-Azure-HPC-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-Azure-HPC-On-Demand
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-Azure-SAP-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-Azure-SAP-On-Demand
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-Azure-Standard-On-Demand
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-EC2-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-EC2-ECS-On-Demand
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-EC2-On-Demand
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-EC2-SAP-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-EC2-SAP-On-Demand
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-OCI-BYOS-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
SUSE Linux Enterprise Module for Public Cloud 12
cloud-init-19.2-37.33.1
cloud-init-config-suse-19.2-37.33.1
Ссылки
- Link for SUSE-SU-2019:3191-1
- E-Mail link for SUSE-SU-2019:3191-1
- SUSE Security Ratings
- SUSE Bug 1099358
- SUSE Bug 1129124
- SUSE Bug 1136440
- SUSE Bug 1142988
- SUSE Bug 1144363
- SUSE Bug 1151488
- SUSE Bug 1154092
- SUSE CVE CVE-2019-0816 page
Описание
A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'.
Затронутые продукты
Image SLES12-SP4-Azure-BYOS:cloud-init-19.2-37.33.1
Image SLES12-SP4-Azure-BYOS:cloud-init-config-suse-19.2-37.33.1
Image SLES12-SP4-EC2-HVM-BYOS:cloud-init-19.2-37.33.1
Image SLES12-SP4-EC2-HVM-BYOS:cloud-init-config-suse-19.2-37.33.1
Ссылки
- CVE-2019-0816
- SUSE Bug 1129124