File _patchinfo of Package patchinfo.13035
<patchinfo incident="13035">
<issue tracker="bnc" id="1142988">networking problems using cloud-init in leap 15.1 images</issue>
<issue tracker="bnc" id="1144363">cloud-init doesn't call udevadm settle correctly to wait for network device</issue>
<issue tracker="bnc" id="1099358">OS boot failed when ISO mounted and enable cloud-init services</issue>
<issue tracker="bnc" id="1129124">VUL-0: CVE-2019-0816: cloud-init: extra ssh keys added to authorized_keys</issue>
<issue tracker="bnc" id="1154092">cloud-init: datasource ConfigDrive fails</issue>
<issue tracker="bnc" id="1136440">L3-Question: cloud-init :VIO: unable to detect environment</issue>
<issue tracker="bnc" id="1151488">L3: cloud-init resolv.conf changes get clobbered by netconfig</issue>
<issue tracker="cve" id="2019-0816"/>
<packager>rjschwei</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for cloud-init</summary>
<description>This update for cloud-init to version 19.2 fixes the following issues:
Security issue fixed:
- CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorized_keys (bsc#1129124).
Non-security issues fixed:
- Short circuit the conditional for identifying the sysconfig renderer (bsc#1154092, bsc#1142988).
- If /etc/resolv.conf is a symlink, break it. This will avoid netconfig from clobbering the changes cloud-init applied (bsc#1151488).
</description>
</patchinfo>