File _patchinfo of Package patchinfo.2016
<patchinfo incident="2016">
<issue id="965896" tracker="bnc">VUL-1: google-startup-scripts: tmp file overwrite in generate_key</issue>
<issue id="966583" tracker="bnc">Properly handle the deprecation of instance ssh key data</issue>
<issue id="966582" tracker="bnc">Properly handle the deprecation of instance ssh key data</issue>
<category>recommended</category>
<rating>moderate</rating>
<packager>rjschwei</packager>
<description>
This collective update for Google's Computing Environment tools provides fixes
and enhancements:
google-daemon (update to version 1.3.2):
- The instance "sshKey" data is being deprecated by the platform (GCE). Therefore
the initialization client needs to properly deal with this condition.
google-startup-scripts (update to version 1.3.2):
- Fix insecure usage of temporary files when generating keys. (bsc#965896)
- Provide a shutdown service for systemd based systems to better control the
stop order.
</description>
<summary>Recommended update for google-daemon, google-startup-scripts</summary>
</patchinfo>