Red Hat Security Advisory

RHSA-2020:3644

cloud-init security update

Released 2020-09-08 · Red Hat rating Low · View on Red Hat →

Fixed in

TI-2018-07709 CVE-2018-10896 · GHSA-rwhw-r234-9p3m

LOW 31

The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00351 Published 2018-08-01 Partial fix CWE-321