Security update for cloud-init
This update for cloud-init to version 19.2 fixes the following issues:
Security issue fixed:
- CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorized_keys (bsc#1129124).
Non-security issues fixed:
- Short circuit the conditional for identifying the sysconfig renderer (bsc#1154092, bsc#1142988).
- If /etc/resolv.conf is a symlink, break it. This will avoid netconfig from clobbering the changes cloud-init applied (bsc#1151488).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
-
Submitted by
Robert Schweikert (rjschwei)
Fixed bugs
bnc#1144363
cloud-init doesn't call udevadm settle correctly to wait for network device
bnc#1099358
OS boot failed when ISO mounted and enable cloud-init services
bnc#1142988
networking problems using cloud-init in leap 15.1 images
bnc#1136440
L3-Question: cloud-init :VIO: unable to detect environment
bnc#1151488
L3: cloud-init resolv.conf changes get clobbered by netconfig
bnc#1154092
cloud-init: datasource ConfigDrive fails
bnc#1129124
VUL-0: CVE-2019-0816: cloud-init: extra ssh keys added to authorized_keys
