{"id":"CLSA-2025-1760025490","summary":"cloud-init: Fix of CVE-2023-1786","details":"- CVE-2023-1786: fix leak of sensitive user/vendor data and enforce 640 perms\n  on cloud-init.log","modified":"2026-06-01T00:31:18.583484716Z","published":"2025-10-09T15:58:18Z","upstream":["CVE-2023-1786"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1760025490.html"}],"affected":[{"package":{"name":"cloud-init","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cloud-init?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.1-10.el9.alma.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1760025490.json"}}],"schema_version":"1.7.5"}