The subject line says tomcat but the body says cloud-init..what really was updated? Steve ________________________________ From: [log in to unmask] <[log in to unmask]> on behalf of Farhan Ahmed <[log in to unmask]> Sent: Tuesday, March 19, 2019 12:50:20 PM To: scientific-linux-errata Subject: Security ERRATA Moderate: tomcat on SL7.x (x86_64) Synopsis: Moderate: cloud-init security update Advisory ID: SLSA-2019:0597-1 Issue Date: 2019-03-18 CVE Numbers: CVE-2019-0816 -- Security Fix(es): * cloud-init: extra ssh keys added to authorized_keys on the Azure platform (CVE-2019-0816) -- SL7 x86_64 cloud-init-18.2-1.el7_6.2.x86_64.rpm - Scientific Linux Development Team