Amazon Linux 2023 Security Advisory: ALAS-2023-196
Advisory Release Date: 2023-06-05 16:39 Pacific
Advisory Updated Date: 2023-06-07 20:09 Pacific
Severity:
Medium
Issue Overview:
Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege. (CVE-2023-1786)
Affected Packages:
cloud-init
Issue Correction:
Run dnf update cloud-init --releasever 2023.0.20230607 to update your system.
New Packages:
noarch:
cloud-init-22.2.2-1.amzn2023.1.8.noarch
src:
cloud-init-22.2.2-1.amzn2023.1.8.src