File _patchinfo of Package patchinfo.2016

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.2016

<patchinfo incident="2016">
  <issue id="965896" tracker="bnc">VUL-1: google-startup-scripts: tmp file overwrite in generate_key</issue>
  <issue id="966583" tracker="bnc">Properly handle the deprecation of instance ssh key data</issue>
  <issue id="966582" tracker="bnc">Properly handle the deprecation of instance ssh key data</issue>
  <category>recommended</category>
  <rating>moderate</rating>
  <packager>rjschwei</packager>
  <description>
This collective update for Google's Computing Environment tools provides fixes
and enhancements:

google-daemon (update to version 1.3.2):

- The instance "sshKey" data is being deprecated by the platform (GCE). Therefore
  the initialization client needs to properly deal with this condition.

google-startup-scripts (update to version 1.3.2):

- Fix insecure usage of temporary files when generating keys. (bsc#965896)
- Provide a shutdown service for systemd based systems to better control the
  stop order.
</description>
  <summary>Recommended update for google-daemon, google-startup-scripts</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.2016

Places