The subject line says tomcat but the body says cloud-init..what really was updated?


Steve


From: [log in to unmask] <[log in to unmask]> on behalf of Farhan Ahmed <[log in to unmask]>
Sent: Tuesday, March 19, 2019 12:50:20 PM
To: scientific-linux-errata
Subject: Security ERRATA Moderate: tomcat on SL7.x (x86_64)
 
Synopsis: Moderate: cloud-init security update
Advisory ID:       SLSA-2019:0597-1
Issue Date:        2019-03-18
CVE Numbers:       CVE-2019-0816
--

Security Fix(es):

* cloud-init: extra ssh keys added to authorized_keys on the Azure
platform (CVE-2019-0816)
--

SL7
  x86_64
    cloud-init-18.2-1.el7_6.2.x86_64.rpm

- Scientific Linux Development Team