Format: 1.8
Date: Thu, 20 Apr 2023 20:37:40 -0500
Source: cloud-init
Binary: cloud-init
Built-For-Profiles: noudeb
Architecture: all amd64_translations
Version: 23.1.2-0ubuntu0~22.04.1
Distribution: jammy
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy02-amd64-042.buildd>
Changed-By: James Falcon <james.falcon@canonical.com>
Description:
 cloud-init - initialization and customization tool for cloud instances
Launchpad-Bugs-Fixed: 2013967
Changes:
 cloud-init (23.1.2-0ubuntu0~22.04.1) jammy; urgency=medium
 .
   * SECURITY UPDATE: Make user/vendor data sensitive and remove log permissions
     Because user data and vendor data may contain sensitive information,
     this commit ensures that any user data or vendor data written to
     instance-data.json gets redacted and is only available to root user.
 .
     Also, modify the permissions of cloud-init.log to be 640, so that
     sensitive data leaked to the log isn't world readable.
     Additionally, remove the logging of user data and vendor data to
     cloud-init.log from the Vultr datasource.
 .
     This is based on upstream snapshot of 23.1.2 [(LP: #2013967)]
 .
     - d/cloud-init.postinst: postinst fixes for LP: #2013967
       Redact sensitive keys from world-readable instance-data.json on upgrade.
       Set perms 640 for /var/log/cloud-init.log on pkg upgrade.
       Redact sensitive Vultr messages from /var/log/cloud-init.log
     - (CVE-2023-1786)
Checksums-Sha1:
 d5cba632f7d9a0fe0908debcde0f7c7a8ca1d28b 530940 cloud-init_23.1.2-0ubuntu0~22.04.1_all.deb
 59212d3d02d5e77b2eae986ebc1bbcfc86922a01 8644 cloud-init_23.1.2-0ubuntu0~22.04.1_amd64.buildinfo
 4d48bac29ec2ff544be27638ea18c176bb7a87aa 1409 cloud-init_23.1.2-0ubuntu0~22.04.1_amd64_translations.tar.gz
Checksums-Sha256:
 5ecc6e3b4fdc8ed2961eb76cca067cefe31e1a78094de8744ad525311238b002 530940 cloud-init_23.1.2-0ubuntu0~22.04.1_all.deb
 dd1507970815a78723fc8fc481b3a42f1f91580361de0cdf4a3670f4ca7b1e2e 8644 cloud-init_23.1.2-0ubuntu0~22.04.1_amd64.buildinfo
 f620c32bb372a94a200918740c2c7d30c48e7f389bb88aff71ea886b6f7937bc 1409 cloud-init_23.1.2-0ubuntu0~22.04.1_amd64_translations.tar.gz
Files:
 0353903e7a8ae72cfa2382d59c04ec06 530940 admin optional cloud-init_23.1.2-0ubuntu0~22.04.1_all.deb
 f04203296a4688f9bae3d2cd7896db36 8644 admin optional cloud-init_23.1.2-0ubuntu0~22.04.1_amd64.buildinfo
 eb345a3abe7034c24e7e1c74b7ad396b 1409 raw-translations - cloud-init_23.1.2-0ubuntu0~22.04.1_amd64_translations.tar.gz