<div class="container">
<h1>Security update for cloud-init</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2024:0128-1</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1198269">bsc#1198269</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1201010">bsc#1201010</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214169">bsc#1214169</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215740">bsc#1215740</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215794">bsc#1215794</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1216007">bsc#1216007</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1216011">bsc#1216011</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2023-1786.html">CVE-2023-1786</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2023-1786</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2023-1786</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">openSUSE Leap 15.4</li>
<li class="list-group-item">openSUSE Leap 15.5</li>
<li class="list-group-item">Public Cloud Module 15-SP2</li>
<li class="list-group-item">Public Cloud Module 15-SP1</li>
<li class="list-group-item">Public Cloud Module 15-SP3</li>
<li class="list-group-item">Public Cloud Module 15-SP4</li>
<li class="list-group-item">Public Cloud Module 15-SP5</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP1</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP2</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP3</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP1</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP2</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP3</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP1</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP2</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP3</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP5</li>
<li class="list-group-item">SUSE Manager Proxy 4.0</li>
<li class="list-group-item">SUSE Manager Proxy 4.1</li>
<li class="list-group-item">SUSE Manager Proxy 4.2</li>
<li class="list-group-item">SUSE Manager Proxy 4.3</li>
<li class="list-group-item">SUSE Manager Retail Branch Server 4.0</li>
<li class="list-group-item">SUSE Manager Retail Branch Server 4.1</li>
<li class="list-group-item">SUSE Manager Retail Branch Server 4.2</li>
<li class="list-group-item">SUSE Manager Retail Branch Server 4.3</li>
<li class="list-group-item">SUSE Manager Server 4.0</li>
<li class="list-group-item">SUSE Manager Server 4.1</li>
<li class="list-group-item">SUSE Manager Server 4.2</li>
<li class="list-group-item">SUSE Manager Server 4.3</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves one vulnerability and has six security fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for cloud-init contains the following fixes:</p>
<ul>
<li>
<p>Move fdupes call back to %install.(bsc#1214169)</p>
</li>
<li>
<p>Update to version 23.3. (bsc#1216011)</p>
</li>
<li>(bsc#1215794)</li>
<li>(bsc#1215740)</li>
<li>(bsc#1216007)</li>
<li>Bump pycloudlib to 1!5.1.0 for ec2 mantic daily image support (#4390)</li>
<li>Fix cc_keyboard in mantic (LP: #2030788)</li>
<li>ec2: initialize get_instance_userdata return value to bytes (#4387)
[Noah Meyerhans]</li>
<li>cc_users_groups: Add doas/opendoas support (#4363) [dermotbradley]</li>
<li>Fix pip-managed ansible</li>
<li>status: treat SubState=running and MainPID=0 as service exited</li>
<li>azure/imds: increase read-timeout to 30s (#4372) [Chris Patterson]</li>
<li>collect-logs fix memory usage (SC-1590) (#4289)
[Alec Warren] (LP: #1980150)</li>
<li>cc_mounts: Use fallocate to create swapfile on btrfs (#4369)</li>
<li>Undocument nocloud-net (#4318)</li>
<li>feat(akamai): add akamai to settings.py and apport.py (#4370)</li>
<li>read-version: fallback to get_version when git describe fails (#4366)</li>
<li>apt: fix cloud-init status --wait blocking on systemd v 253 (#4364)</li>
<li>integration tests: Pass username to pycloudlib (#4324)</li>
<li>Bump pycloudlib to 1!5.1.0 (#4353)</li>
<li>cloud.cfg.tmpl: reorganise, minimise/reduce duplication (#4272)
[dermotbradley]</li>
<li>analyze: fix (unexpected) timestamp parsing (#4347) [Mina Galić]</li>
<li>cc_growpart: fix tests to run on FreeBSD (#4351) [Mina Galić]</li>
<li>subp: Fix spurious test failure on FreeBSD (#4355) [Mina Galić]</li>
<li>cmd/clean: fix tests on non-Linux platforms (#4352) [Mina Galić]</li>
<li>util: Fix get_proc_ppid() on non-Linux systems (#4348) [Mina Galić]</li>
<li>cc_wireguard: make tests pass on FreeBSD (#4346) [Mina Galić]</li>
<li>unittests: fix breakage in test_read_cfg_paths_fetches_cached_datasource
(#4328) [Ani Sinha]</li>
<li>Fix test_tools.py collection (#4315)</li>
<li>cc_keyboard: add Alpine support (#4278) [dermotbradley]</li>
<li>Flake8 fixes (#4340) [Robert Schweikert]</li>
<li>cc_mounts: Fix swapfile not working on btrfs (#4319) [王煎饼] (LP: #1884127)</li>
<li>ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen (#4281)
[Wei Zhou]</li>
<li>ec2: Support double encoded userdata (#4275) [Noah Meyerhans]</li>
<li>cc_mounts: xfs is a Linux only FS (#4334) [Mina Galić]</li>
<li>tests/net: fix TestGetInterfaces' mock coverage for get_master (#4336)
[Chris Patterson]</li>
<li>change openEuler to openeuler and fix some bugs in openEuler (#4317)
[sxt1001]</li>
<li>Replace flake8 with ruff (#4314)</li>
<li>NM renderer: set default IPv6 addr-gen-mode for all interfaces to eui64
(#4291) [Ani Sinha]</li>
<li>cc_ssh_import_id: add Alpine support and add doas support (#4277)
[dermotbradley]</li>
<li>sudoers not idempotent (SC-1589) (#4296) [Alec Warren] (LP: #1998539)</li>
<li>Added support for Akamai Connected Cloud (formerly Linode) (#4167)
[Will Smith]</li>
<li>Fix reference before assignment (#4292)</li>
<li>Overhaul module reference page (#4237) [Sally]</li>
<li>replaced spaces with commas for setting passenv (#4269) [Alec Warren]</li>
<li>DS VMware: modify a few log level (#4284) [PengpengSun]</li>
<li>tools/read-version refactors and unit tests (#4268)</li>
<li>Ensure get_features() grabs all features (#4285)</li>
<li>Don't always require passlib dependency (#4274)</li>
<li>tests: avoid leaks into host system checking of ovs-vsctl cmd (#4275)</li>
<li>Fix NoCloud kernel commandline key parsing (#4273)</li>
<li>testing: Clear all LRU caches after each test (#4249)</li>
<li>Remove the crypt dependency (#2139) [Gonéri Le Bouder]</li>
<li>logging: keep current file mode of log file if its stricter than the
new mode (#4250) [Ani Sinha]</li>
<li>Remove default membership in redundant groups (#4258)
[Dave Jones] (LP: #1923363)</li>
<li>doc: improve datasource_creation.rst (#4262)</li>
<li>Remove duplicate Integration testing button (#4261) [Rishita Shaw]</li>
<li>tools/read-version: fix the tool so that it can handle version parsing
errors (#4234) [Ani Sinha]</li>
<li>net/dhcp: add udhcpc support (#4190) [Jean-François Roche]</li>
<li>DS VMware: add i386 arch dir to deployPkg plugin search path
[PengpengSun]</li>
<li>LXD moved from linuxcontainers.org to Canonical [Simon Deziel]</li>
<li>cc_mounts.py: Add note about issue with creating mounts inside mounts
(#4232) [dermotbradley]</li>
<li>lxd: install lxd from snap, not deb if absent in image</li>
<li>landscape: use landscape-config to write configuration</li>
<li>Add deprecation log during init of DataSourceDigitalOcean (#4194)
[tyb-truth]</li>
<li>doc: fix typo on apt.primary.arches (#4238) [Dan Bungert]</li>
<li>Inspect systemd state for cloud-init status (#4230)</li>
<li>instance-data: add system-info and features to combined-cloud-config
(#4224)</li>
<li>systemd: Block login until config stage completes (#2111) (LP: #2013403)</li>
<li>tests: proposed should invoke apt-get install -t=<release>-proposed
(#4235)</li>
<li>cloud.cfg.tmpl: reinstate ca_certs entry (#4236) [dermotbradley]</li>
<li>Remove feature flag override ability (#4228)</li>
<li>tests: drop stray unrelated file presence test (#4227)</li>
<li>Update LXD URL (#4223) [Sally]</li>
<li>schema: add network v1 schema definition and validation functions</li>
<li>tests: daily PPA for devel series is version 99.daily update tests to
match (#4225)</li>
<li>instance-data: write /run/cloud-init/combined-cloud-config.json</li>
<li>mount parse: Fix matching non-existent directories (#4222) [Mina Galić]</li>
<li>Specify build-system for pep517 (#4218)</li>
<li>Fix network v2 metric rendering (#4220)</li>
<li>Migrate content out of FAQ page (SD-1187) (#4205) [Sally]</li>
<li>setup: fix generation of init templates (#4209) [Mina Galić]</li>
<li>docs: Correct some bootcmd example wording</li>
<li>fix changelog</li>
<li>tests: reboot client to assert x-shellscript-per-boot is triggered</li>
<li>nocloud: parse_cmdline no longer detects nocloud-net datasource (#4204)
(LP: 4203, #2025180)</li>
<li>Add docstring and typing to mergemanydict (#4200)</li>
<li>BSD: add dsidentify to early startup scripts (#4182) [Mina Galić]</li>
<li>handler: report errors on skipped merged cloud-config.txt parts
(LP: #1999952)</li>
<li>Add cloud-init summit writeups (#4179) [Sally]</li>
<li>tests: Update test_clean_log for oci (#4187)</li>
<li>gce: improve ephemeral fallback NIC selection (CPC-2578) (#4163)</li>
<li>tests: pin pytest 7.3.1 to avoid adverse testpaths behavior (#4184)</li>
<li>Ephemeral Networking for FreeBSD (#2165) [Mina Galić]</li>
<li>Clarify directory syntax for nocloud local filesystem. (#4178)</li>
<li>Set default renderer as sysconfig for centos/rhel (#4165) [Ani Sinha]</li>
<li>Test static routes and netplan 0.106</li>
<li>FreeBSD fix parsing of mount and mount options (#2146) [Mina Galić]</li>
<li>test: add tracking bug id (#4164)</li>
<li>tests: can't match MAC for LXD container veth due to netplan 0.106
(#4162)</li>
<li>Add kaiwalyakoparkar as a contributor (#4156) [Kaiwalya Koparkar]</li>
<li>BSD: remove datasource_list from cloud.cfg template (#4159) [Mina Galić]</li>
<li>launching salt-minion in masterless mode (#4110) [Denis Halturin]</li>
<li>tools: fix run-container builds for rockylinux/8 git hash mismatch
(#4161)</li>
<li>fix doc lint: spellchecker tripped up (#4160) [Mina Galić]</li>
<li>Support Ephemeral Networking for BSD (#2127)</li>
<li>Added / fixed support for static routes on OpenBSD and FreeBSD (#2157)
[Kadir Mueller]</li>
<li>cc_rsyslog: Refactor for better multi-platform support (#4119)
[Mina Galić] (LP: #1798055)</li>
<li>tests: fix test_lp1835584 (#4154)</li>
<li>cloud.cfg mod names: docs and rename salt_minion and set_password (#4153)</li>
<li>vultr: remove check_route check (#2151) [Jonas Chevalier]</li>
<li>Update SECURITY.md (#4150) [Indrranil Pawar]</li>
<li>Update CONTRIBUTING.rst (#4149) [Indrranil Pawar]</li>
<li>Update .github-cla-signers (#4151) [Indrranil Pawar]</li>
<li>Standardise module names in cloud.cfg.tmpl to only use underscore
(#4128) [dermotbradley]</li>
<li>Modify PR template so autoclose works
>From 23.2.2</li>
<li>Fix NoCloud kernel commandline key parsing (#4273) (Fixes: #4271)
(LP: #2028562)</li>
<li>Fix reference before assignment (#4292) (Fixes: #4288) (LP: #2028784)
>From 23.2.1</li>
<li>nocloud: Fix parse_cmdline detection of nocloud-net datasource (#4204)
(Fixes: 4203) (LP: #2025180)
>From 23.2</li>
<li>BSD: simplify finding MBR partitions by removing duplicate code
[Mina Galić]</li>
<li>tests: bump pycloudlib version for mantic builds</li>
<li>network-manager: Set higher autoconnect priority for nm keyfiles (#3671)
[Ani Sinha]</li>
<li>alpine.py: change the locale file used (#4139) [dermotbradley]</li>
<li>cc_ntp: Sync up with current FreeBSD ntp.conf (#4122) [Mina Galić]</li>
<li>config: drop refresh_rmc_and_interface as RHEL 7 no longer supported
[Robert Schweikert]</li>
<li>docs: Add feedback button to docs</li>
<li>net/sysconfig: enable sysconfig renderer if network manager has ifcfg-rh
plugin (#4132) [Ani Sinha]</li>
<li>For Alpine use os-release PRETTY_NAME (#4138) [dermotbradley]</li>
<li>network_manager: add a method for ipv6 static IP configuration (#4127)
[Ani Sinha]</li>
<li>correct misnamed template file host.mariner.tmpl (#4124) [dermotbradley]</li>
<li>nm: generate ipv6 stateful dhcp config at par with sysconfig (#4115)
[Ani Sinha]</li>
<li>Add templates for GitHub Issues</li>
<li>Add 'peers' and 'allow' directives in cc_ntp (#3124) [Jacob Salmela]</li>
<li>FreeBSD: Fix user account locking (#4114) [Mina Galić] (GH: #1854594)</li>
<li>FreeBSD: add ResizeGrowFS class to cc_growpart (#2334) [Mina Galić]</li>
<li>Update tests in Azure TestCanDevBeReformatted class (#2771)
[Ksenija Stanojevic]</li>
<li>Replace Launchpad references with GitHub Issues</li>
<li>Fix KeyError in iproute pformat (#3287) [Dmitry Zykov]</li>
<li>schema: read_cfg_paths call init.fetch to lookup /v/l/c/instance</li>
<li>azure/errors: introduce reportable errors for imds (#3647)
[Chris Patterson]</li>
<li>FreeBSD (and friends): better identify MBR slices (#2168)
[Mina Galić] (LP: #2016350)</li>
<li>azure/errors: add host reporting for dhcp errors (#2167)
[Chris Patterson]</li>
<li>net: purge blacklist_drivers across net and azure (#2160)
[Chris Patterson]</li>
<li>net: refactor hyper-v VF filtering and apply to get_interfaces() (#2153)
[Chris Patterson]</li>
<li>tests: avoid leaks to underlying filesystem for /etc/cloud/clean.d
(#2251)</li>
<li>net: refactor find_candidate_nics_on_linux() to use get_interfaces()
(#2159) [Chris Patterson]</li>
<li>resolv_conf: Allow > 3 nameservers (#2152) [Major Hayden]</li>
<li>Remove mount NTFS error message (#2134) [Ksenija Stanojevic]</li>
<li>integration tests: fix image specification parsing (#2166)</li>
<li>ci: add hypothesis scheduled GH check (#2149)</li>
<li>Move supported distros list to docs (#2162)</li>
<li>Fix logger, use instance rather than module function (#2163)</li>
<li>README: Point to Github Actions build status (#2158)</li>
<li>Revert "fix linux-specific code on bsd (#2143)" (#2161)</li>
<li>Do not generate dsa and ed25519 key types when crypto FIPS mode is
enabled (#2142) [Ani Sinha] (LP: 2017761)</li>
<li>Add documentation label automatically (#2156)</li>
<li>sources/azure: report success to host and introduce kvp module (#2141)
[Chris Patterson]</li>
<li>setup.py: use pkg-config for udev/rules path (#2137) [dankm]</li>
<li>openstack/static: honor the DNS servers associated with a network
(#2138) [Gonéri Le Bouder]</li>
<li>fix linux-specific code on bsd (#2143)</li>
<li>cli: schema validation of jinja template user-data (SC-1385) (#2132)
(LP: #1881925)</li>
<li>gce: activate network discovery on every boot (#2128)</li>
<li>tests: update integration test to assert 640 across reboots (#2145)</li>
<li>Make user/vendor data sensitive and remove log permissions (#2144)
(LP: #2013967)</li>
<li>Update kernel command line docs (SC-1457) (#2133)</li>
<li>docs: update network configuration path links (#2140) [d1r3ct0r]</li>
<li>sources/azure: report failures to host via kvp (#2136) [Chris Patterson]</li>
<li>net: Document use of <code>ip route append</code> to add routes (#2130)</li>
<li>dhcp: Add missing mocks (#2135)</li>
<li>azure/imds: retry fetching metadata up to 300 seconds (#2121)
[Chris Patterson]</li>
<li>[1/2] DHCP: Refactor dhcp client code (#2122)</li>
<li>azure/errors: treat traceback_base64 as string (#2131) [Chris Patterson]</li>
<li>azure/errors: introduce reportable errors (#2129) [Chris Patterson]</li>
<li>users: schema permit empty list to indicate create no users</li>
<li>azure: introduce identity module (#2116) [Chris Patterson]</li>
<li>Standardize disabling cloud-init on non-systemd (#2112)</li>
<li>Update .github-cla-signers (#2126) [Rob Tongue]</li>
<li>NoCloud: Use seedfrom protocol to determine mode (#2107)</li>
<li>rhel: Remove sysvinit files. (#2114)</li>
<li>tox.ini: set -vvvv --showlocals for pytest (#2104) [Chris Patterson]</li>
<li>Fix NoCloud kernel commandline semi-colon args</li>
<li>run-container: make the container/VM timeout configurable (#2118)
[Paride Legovini]</li>
<li>suse: Remove sysvinit files. (#2115)</li>
<li>test: Backport assert_call_count for old requests (#2119)</li>
<li>Add "licebmi" as contributor (#2113) [Mark Martinez]</li>
<li>Adapt DataSourceScaleway to upcoming IPv6 support (#2033)
[Louis Bouchard]</li>
<li>rhel: make sure previous-hostname file ends with a new line (#2108)
[Ani Sinha]</li>
<li>Adding contributors for DataSourceAkamai (#2110) [acourdavAkamai]</li>
<li>Cleanup ephemeral IP routes on exception (#2100) [sxt1001]</li>
<li>commit 09a64badfb3f51b1b391fa29be19962381a4bbeb [sxt1001] (LP: #2011291)</li>
<li>Standardize kernel commandline user interface (#2093)</li>
<li>config/cc_resizefs: fix do_resize arguments (#2106) [Chris Patterson]</li>
<li>Fix test_dhclient_exits_with_error (#2105)</li>
<li>net/dhcp: catch dhclient failures and raise NoDHCPLeaseError (#2083)
[Chris Patterson]</li>
<li>sources/azure: move pps handling out of _poll_imds() (#2075)
[Chris Patterson]</li>
<li>tests: bump pycloudlib version (#2102)</li>
<li>schema: do not manipulate draft4 metaschema for jsonschema 2.6.0 (#2098)</li>
<li>sources/azure/imds: don't count timeout errors as connection errors
(#2074) [Chris Patterson]</li>
<li>Fix Python 3.12 unit test failures (#2099)</li>
<li>integration tests: Refactor instance checking (#1989)</li>
<li>ci: migrate remaining jobs from travis to gh (#2085)</li>
<li>missing ending quote in instancedata docs(#2094) [Hong L]</li>
<li>refactor: stop passing log instances to cc_* handlers (#2016) [d1r3ct0r]</li>
<li>tests/vmware: fix test_no_data_access_method failure (#2092)
[Chris Patterson]</li>
<li>Don't change permissions of netrules target (#2076) (LP: #2011783)</li>
<li>tests/sources: patch util.get_cmdline() for datasource tests (#2091)
[Chris Patterson]</li>
<li>macs: ignore duplicate MAC for devs with driver driver qmi_wwan (#2090)
(LP: #2008888)</li>
<li>Fedora: Enable CA handling (#2086) [František Zatloukal]</li>
<li>Send dhcp-client-identifier for InfiniBand ports (#2043) [Waleed Mousa]</li>
<li>cc_ansible: complete the examples and doc (#2082) [Yves]</li>
<li>bddeb: for dev package, derive debhelper-compat from host system</li>
<li>apport: only prompt for cloud_name when instance-data.json is absent</li>
<li>datasource: Optimize datasource detection, fix bugs (#2060)</li>
<li>Handle non existent ca-cert-config situation (#2073) [Shreenidhi Shedi]</li>
<li>sources/azure: add networking check for all source PPS (#2061)
[Chris Patterson]</li>
<li>do not attempt dns resolution on ip addresses (#2040)</li>
<li>chore: fix style tip (#2071)</li>
<li>Fix metadata IP in instancedata.rst (#2063) [Brian Haley]</li>
<li>util: Pass deprecation schedule in deprecate_call() (#2064)</li>
<li>config: Update grub-dpkg docs (#2058)</li>
<li>docs: Cosmetic improvements and styling (#2057) [s-makin]</li>
<li>cc_grub_dpkg: Added UEFI support (#2029) [Alexander Birkner]</li>
<li>tests: Write to /var/spool/rsyslog to adhere to apparmor profile (#2059)</li>
<li>oracle-ds: prefer system_cfg over ds network config source (#1998)
(LP: #1956788)</li>
<li>Remove dead code (#2038)</li>
<li>source: Force OpenStack when it is only option (#2045) (LP: #2008727)</li>
<li>cc_ubuntu_advantage: improve UA logs discovery</li>
<li>sources/azure: fix regressions in IMDS behavior (#2041) [Chris Patterson]</li>
<li>tests: fix test_schema (#2042)</li>
<li>dhcp: Cleanup unused kwarg (#2037)</li>
<li>sources/vmware/imc: fix-missing-catch-few-negtive-scenarios (#2027)
[PengpengSun]</li>
<li>dhclient_hook: remove vestigal dhclient_hook command (#2015)</li>
<li>log: Add standardized deprecation tooling (SC-1312) (#2026)</li>
<li>Enable SUSE based distros for ca handling (#2036) [Robert Schweikert]
>From 23.1.2</li>
<li>
<p>Make user/vendor data sensitive and remove log permissions
(LP: #2013967) (CVE-2023-1786)</p>
</li>
<li>
<p>Remove six dependency (bsc#1198269)</p>
</li>
<li>Update to version 22.4 (bsc#1201010)</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
openSUSE Leap 15.4
<br/>
<code>zypper in -t patch openSUSE-SLE-15.4-2024-128=1</code>
</li>
<li class="list-group-item">
openSUSE Leap 15.5
<br/>
<code>zypper in -t patch openSUSE-SLE-15.5-2024-128=1</code>
</li>
<li class="list-group-item">
Public Cloud Module 15-SP1
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2024-128=1</code>
</li>
<li class="list-group-item">
Public Cloud Module 15-SP2
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-128=1</code>
</li>
<li class="list-group-item">
Public Cloud Module 15-SP3
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-128=1</code>
</li>
<li class="list-group-item">
Public Cloud Module 15-SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-128=1</code>
</li>
<li class="list-group-item">
Public Cloud Module 15-SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-128=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)
<ul>
<li>cloud-init-config-suse-23.3-150100.8.71.1</li>
<li>cloud-init-23.3-150100.8.71.1</li>
<li>cloud-init-doc-23.3-150100.8.71.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)
<ul>
<li>cloud-init-config-suse-23.3-150100.8.71.1</li>
<li>cloud-init-23.3-150100.8.71.1</li>
<li>cloud-init-doc-23.3-150100.8.71.1</li>
</ul>
</li>
<li>
Public Cloud Module 15-SP1 (aarch64 ppc64le s390x x86_64)
<ul>
<li>cloud-init-config-suse-23.3-150100.8.71.1</li>
<li>cloud-init-23.3-150100.8.71.1</li>
</ul>
</li>
<li>
Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64)
<ul>
<li>cloud-init-config-suse-23.3-150100.8.71.1</li>
<li>cloud-init-23.3-150100.8.71.1</li>
</ul>
</li>
<li>
Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64)
<ul>
<li>cloud-init-config-suse-23.3-150100.8.71.1</li>
<li>cloud-init-23.3-150100.8.71.1</li>
</ul>
</li>
<li>
Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64)
<ul>
<li>cloud-init-config-suse-23.3-150100.8.71.1</li>
<li>cloud-init-23.3-150100.8.71.1</li>
</ul>
</li>
<li>
Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64)
<ul>
<li>cloud-init-config-suse-23.3-150100.8.71.1</li>
<li>cloud-init-23.3-150100.8.71.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2023-1786.html">https://www.suse.com/security/cve/CVE-2023-1786.html</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1198269">https://bugzilla.suse.com/show_bug.cgi?id=1198269</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1201010">https://bugzilla.suse.com/show_bug.cgi?id=1201010</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214169">https://bugzilla.suse.com/show_bug.cgi?id=1214169</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215740">https://bugzilla.suse.com/show_bug.cgi?id=1215740</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215794">https://bugzilla.suse.com/show_bug.cgi?id=1215794</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1216007">https://bugzilla.suse.com/show_bug.cgi?id=1216007</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1216011">https://bugzilla.suse.com/show_bug.cgi?id=1216011</a>
</li>
</ul>
</div>