Red Hat Product Errata RHSA-2020:3050 - Security Advisory
Issued:
2020-07-21
Updated:
2020-07-21

RHSA-2020:3050 - Security Advisory

Synopsis

Low: cloud-init security, bug fix, and enhancement update

Type/Severity

Security Advisory: Low

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for cloud-init is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.

The following packages have been upgraded to a later upstream version: cloud-init (19.4). (BZ#1811912)

Security Fix(es):

  • cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.8 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.4 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.2 x86_64

Fixes

  • BZ - 1598831 - CVE-2018-10896 cloud-init: default configuration disabled deletion of SSH host keys
  • BZ - 1811912 - [RHEL-8.2.1] cloud-init rebase to 19.4
  • BZ - 1831646 - [RHEL8.2.1] Race condition of starting cloud-init and NetworkManager
  • BZ - 1844366 - [rhel-8.2.1]Incorrect ds-identify check in cloud-init-generator
  • BZ - 1850456 - [RHEL8.2.1] Do not log IMDSv2 token values into cloud-init.log

Red Hat Enterprise Linux for x86_64 8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2

SRPM
x86_64

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux Server - AUS 8.4

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
x86_64

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
s390x
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
s390x
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
s390x
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
s390x
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2

SRPM
s390x

Red Hat Enterprise Linux for Power, little endian 8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
ppc64le
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
ppc64le
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
ppc64le
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
ppc64le
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2

SRPM
ppc64le

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux Server - TUS 8.4

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux Server - TUS 8.2

SRPM
x86_64

Red Hat Enterprise Linux for ARM 64 8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
aarch64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
aarch64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
aarch64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
aarch64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2

SRPM
aarch64

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
ppc64le
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
ppc64le
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
ppc64le
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2

SRPM
ppc64le

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4

SRPM
cloud-init-19.4-1.el8.7.src.rpm SHA-256: f22f8d0d8b33508ad539879f88dec7f8970a222ac969b9943e66a0364a21cdc9
x86_64
cloud-init-19.4-1.el8.7.noarch.rpm SHA-256: 846dbf4faaa9d8b57e82be6e724a16c3a480c4d727d682ea02b2ae13f04d460b

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.2

SRPM
x86_64

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.