Most recent entries from all

ALSA-2023:6371 — Moderate: cloud-init security, bug fix, and enhancement update

2026-10-03T17:14:59.078066+00:00

Affected: AlmaLinux:9: cloud-init

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.

Security Fix(es):

* cloud-init: sensitive data could be exposed in logs (CVE-2023-1786)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Withdrawn: BELL-CVE-2023-1786 — CVE-2023-1786 does not affect BellSoft software

2026-10-03T17:14:59.078126+00:00

Withdrawn by the publisher.

certfr-2024-avi-0305 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre el…

2026-10-03T17:14:59.078144+00:00

certfr-2024-avi-0305

CLEANSTART-2024-JF46935 — Sensitive data could be exposed in logs of cloud-init before version 23

2026-10-03T17:14:59.078160+00:00

Affected: CleanStart: cloud-init

Security vulnerability affects the cloud-init package. Sensitive data could be exposed in logs of cloud-init before version 23.

EUVD-2026-216163

2026-10-03T17:14:59.078179+00:00

EUVD-2026-216163

fkie_cve-2023-1786

2026-10-03T17:14:59.078191+00:00

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

GHSA-2vcw-8vc6-xxfw

2026-10-03T17:14:59.078210+00:00

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

gsd-2023-1786

2026-10-03T17:14:59.078222+00:00

gsd-2023-1786

msrc_CVE-2023-1786 — sensitive data exposure in cloud-init logs

2026-10-03T17:14:59.078232+00:00

msrc_CVE-2023-1786

OESA-2023-1297 — cloud-init security update

2026-10-03T17:14:59.078245+00:00

Affected: openEuler:20.03-LTS-SP1: cloud-init, openEuler:20.03-LTS-SP3: cloud-init, openEuler:22.03-LTS: cloud-init, openEuler:22.03-LTS-SP1: cloud-init

Cloud-init is the defacto multi-distribution package that handles early initialization of a cloud instance. Security Fix(es): Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.(CVE-2023-1786)

openSUSE-SU-2024:13053-1 — cloud-init-23.1-2.1 on GA media

2026-10-03T17:14:59.078268+00:00

cloud-init-23.1-2.1 on GA media

SUSE-SU-2023:2164-1 — Security update for cloud-init

2026-10-03T17:14:59.078283+00:00

Security update for cloud-init

UBUNTU-CVE-2023-1786

2026-10-03T17:14:59.078297+00:00

Affected: Ubuntu:Pro:16.04:LTS: cloud-init, Ubuntu:18.04:LTS: cloud-init, Ubuntu:20.04:LTS: cloud-init, Ubuntu:22.04:LTS: cloud-init

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

WID-SEC-W-2023-2853 — Red Hat Enterprise Linux: Mehrere Schwachstellen

2026-10-03T17:14:59.078317+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.