Format: 1.8
Date: Mon, 24 Apr 2023 15:45:43 -0500
Source: cloud-init
Binary: cloud-init
Built-For-Profiles: noudeb
Architecture: all amd64_translations
Version: 23.1.2-0ubuntu0~23.04.1
Distribution: lunar
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy02-amd64-091.buildd>
Changed-By: James Falcon <james.falcon@canonical.com>
Description:
 cloud-init - initialization and customization tool for cloud instances
Launchpad-Bugs-Fixed: 2013967
Changes:
 cloud-init (23.1.2-0ubuntu0~23.04.1) lunar; urgency=medium
 .
   * d/changelog: updating 23.1.1-0ubuntu2 changelog entry deleting
     mention of a snapshot that was not performed
   * SECURITY UPDATE: Make user/vendor data sensitive and remove log permissions
     Because user data and vendor data may contain sensitive information,
     this commit ensures that any user data or vendor data written to
     instance-data.json gets redacted and is only available to root user.
 .
     Also, modify the permissions of cloud-init.log to be 640, so that
     sensitive data leaked to the log isn't world readable.
     Additionally, remove the logging of user data and vendor data to
     cloud-init.log from the Vultr datasource.
 .
     This is based on upstream release of 23.1.2 [(LP: #2013967)]
 .
     - d/cloud-init.postinst: postinst fixes for LP: #2013967
       Redact sensitive keys from world-readable instance-data.json on upgrade.
       Set perms 640 for /var/log/cloud-init.log on pkg upgrade.
       Redact sensitive Vultr messages from /var/log/cloud-init.log
     - (CVE-2023-1786)
Checksums-Sha1:
 cfaec44682993b8a3ba151c4cd482baa59210a8b 558452 cloud-init_23.1.2-0ubuntu0~23.04.1_all.deb
 6a9a1920bc4f1f8ff0f68a6cfd82217fca5da496 7800 cloud-init_23.1.2-0ubuntu0~23.04.1_amd64.buildinfo
 fa39c6f17e2839dce0443d469994facd88b15e1e 1407 cloud-init_23.1.2-0ubuntu0~23.04.1_amd64_translations.tar.gz
Checksums-Sha256:
 26639758b72ea5906d58678b8abb0011fd7d3c010f2ff35c46d946d8f9f36c2e 558452 cloud-init_23.1.2-0ubuntu0~23.04.1_all.deb
 2efdc4fd5f5172a70268e137f699c2d8da6b6a8ceee8f07b1e3a13bf83b1d3c4 7800 cloud-init_23.1.2-0ubuntu0~23.04.1_amd64.buildinfo
 50eb2710c1bddf8a78743f92d3084acf0874f429d002578d4c484c63b5f3f0df 1407 cloud-init_23.1.2-0ubuntu0~23.04.1_amd64_translations.tar.gz
Files:
 01efbdcbff3c4ec1a8f491baccee799d 558452 admin optional cloud-init_23.1.2-0ubuntu0~23.04.1_all.deb
 3208e87c02b1b2e30488c4f6f06aed69 7800 admin optional cloud-init_23.1.2-0ubuntu0~23.04.1_amd64.buildinfo
 2a829c8c4e25ad923b97710c15918450 1407 raw-translations - cloud-init_23.1.2-0ubuntu0~23.04.1_amd64_translations.tar.gz