Alpine/cloud-init: medium 5.5
When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could al
Action: Upgrade cloud-init to 21.1-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 21.1-r1 | - |
Fixed versions
| 21.1-r1 |
Sources
- osv: ALPINE-CVE-2021-3429#Alpine:v3.18/cloud-init
- https://security.alpinelinux.org/vuln/CVE-2021-3429
published · modified · JSON