The subject line says tomcat but the body says cloud-init..what really was updated?
Steve
________________________________
From: [log in to unmask] <[log in to unmask]> on behalf of Farhan Ahmed <[log in to unmask]>
Sent: Tuesday, March 19, 2019 12:50:20 PM
To: scientific-linux-errata
Subject: Security ERRATA Moderate: tomcat on SL7.x (x86_64)
Synopsis: Moderate: cloud-init security update
Advisory ID: SLSA-2019:0597-1
Issue Date: 2019-03-18
CVE Numbers: CVE-2019-0816
--
Security Fix(es):
* cloud-init: extra ssh keys added to authorized_keys on the Azure
platform (CVE-2019-0816)
--
SL7
x86_64
cloud-init-18.2-1.el7_6.2.x86_64.rpm
- Scientific Linux Development Team