Bug#926043: CVE-2019-0816

2019-04-02 Thread Bastian Blank
On Sat, Mar 30, 2019 at 08:10:39PM +0100, Moritz Muehlenhoff wrote: > Is this something that affects cloud-init as shipped in Debian or in the way > we generate Debian > images for Azure? No, it is not affected as we don't support cloud-init based provisioning, yet. Regards, Bastian -- No one

Bug#926043: CVE-2019-0816

2019-04-01 Thread Moritz Mühlenhoff
Hi Thomas, On Sun, Mar 31, 2019 at 12:33:45AM +0100, Thomas Goirand wrote: > If I understand well the problem, the issue is simply that some extra > Microsoft keys may end up being setup into an Azure Debian instance. I > don't see this as a very "grave" security issue because: > > 1/ Azure users

Bug#926043: CVE-2019-0816

2019-03-30 Thread Thomas Goirand
On 3/30/19 8:10 PM, Moritz Muehlenhoff wrote: > Package: cloud-init > Severity: grave > Tags: security > > This was assigned CVE-2019-0816: > https://code.launchpad.net/~jasonzio/cloud-init/+git/cloud-init/+merge/363445 > https://support.microsoft.com/en-us/help/4491476/extraneous-ssh-public-keys-

Bug#926043: CVE-2019-0816

2019-03-30 Thread Moritz Muehlenhoff
Package: cloud-init Severity: grave Tags: security This was assigned CVE-2019-0816: https://code.launchpad.net/~jasonzio/cloud-init/+git/cloud-init/+merge/363445 https://support.microsoft.com/en-us/help/4491476/extraneous-ssh-public-keys-added-to-authorized-keys-file-on-linux-vm Is this something