{"id":"SUSE-SU-2024:0128-1","summary":"Security update for cloud-init","details":"This update for cloud-init contains the following fixes:\n\n- Move fdupes call back to %install.(bsc#1214169)\n\n- Update to version 23.3. (bsc#1216011)\n  * (bsc#1215794)\n  * (bsc#1215740)\n  * (bsc#1216007)\n  + Bump pycloudlib to 1!5.1.0 for ec2 mantic daily image support (#4390)\n  + Fix cc_keyboard in mantic (LP: #2030788)\n  + ec2: initialize get_instance_userdata return value to bytes (#4387)\n    [Noah Meyerhans]\n  + cc_users_groups: Add doas/opendoas support (#4363) [dermotbradley]\n  + Fix pip-managed ansible\n  + status: treat SubState=running and MainPID=0 as service exited\n  + azure/imds: increase read-timeout to 30s (#4372) [Chris Patterson]\n  + collect-logs fix memory usage (SC-1590) (#4289)\n    [Alec Warren] (LP: #1980150)\n  + cc_mounts: Use fallocate to create swapfile on btrfs (#4369)\n  + Undocument nocloud-net (#4318)\n  + feat(akamai): add akamai to settings.py and apport.py (#4370)\n  + read-version: fallback to get_version when git describe fails (#4366)\n  + apt: fix cloud-init status --wait blocking on systemd v 253 (#4364)\n  + integration tests: Pass username to pycloudlib (#4324)\n  + Bump pycloudlib to 1!5.1.0 (#4353)\n  + cloud.cfg.tmpl: reorganise, minimise/reduce duplication (#4272)\n    [dermotbradley]\n  + analyze: fix (unexpected) timestamp parsing (#4347) [Mina Galić]\n  + cc_growpart: fix tests to run on FreeBSD (#4351) [Mina Galić]\n  + subp: Fix spurious test failure on FreeBSD (#4355) [Mina Galić]\n  + cmd/clean: fix tests on non-Linux platforms (#4352) [Mina Galić]\n  + util: Fix get_proc_ppid() on non-Linux systems (#4348) [Mina Galić]\n  + cc_wireguard: make tests pass on FreeBSD (#4346) [Mina Galić]\n  + unittests: fix breakage in test_read_cfg_paths_fetches_cached_datasource\n    (#4328) [Ani Sinha]\n  + Fix test_tools.py collection (#4315)\n  + cc_keyboard: add Alpine support (#4278) [dermotbradley]\n  + Flake8 fixes (#4340) [Robert Schweikert]\n  + cc_mounts: Fix swapfile not working on btrfs (#4319) [王煎饼] (LP: #1884127)\n  + ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen (#4281)\n    [Wei Zhou]\n  + ec2: Support double encoded userdata (#4275) [Noah Meyerhans]\n  + cc_mounts: xfs is a Linux only FS (#4334) [Mina Galić]\n  + tests/net: fix TestGetInterfaces' mock coverage for get_master (#4336)\n    [Chris Patterson]\n  + change openEuler to openeuler and fix some bugs in openEuler (#4317)\n    [sxt1001]\n  + Replace flake8 with ruff (#4314)\n  + NM renderer: set default IPv6 addr-gen-mode for all interfaces to eui64\n    (#4291) [Ani Sinha]\n  + cc_ssh_import_id: add Alpine support and add doas support (#4277)\n    [dermotbradley]\n  + sudoers not idempotent (SC-1589)  (#4296) [Alec Warren] (LP: #1998539)\n  + Added support for Akamai Connected Cloud (formerly Linode) (#4167)\n    [Will Smith]\n  + Fix reference before assignment (#4292)\n  + Overhaul module reference page (#4237) [Sally]\n  + replaced spaces with commas for setting passenv (#4269) [Alec Warren]\n  + DS VMware: modify a few log level (#4284) [PengpengSun]\n  + tools/read-version refactors and unit tests (#4268)\n  + Ensure get_features() grabs all features (#4285)\n  + Don't always require passlib dependency (#4274)\n  + tests: avoid leaks into host system checking of ovs-vsctl cmd (#4275)\n  + Fix NoCloud kernel commandline key parsing (#4273)\n  + testing: Clear all LRU caches after each test (#4249)\n  + Remove the crypt dependency (#2139) [Gonéri Le Bouder]\n  + logging: keep current file mode of log file if its stricter than the\n    new mode (#4250) [Ani Sinha]\n  + Remove default membership in redundant groups (#4258)\n    [Dave Jones] (LP: #1923363)\n  + doc: improve datasource_creation.rst (#4262)\n  + Remove duplicate Integration testing button (#4261) [Rishita Shaw]\n  + tools/read-version: fix the tool so that it can handle version parsing\n    errors (#4234) [Ani Sinha]\n  + net/dhcp: add udhcpc support (#4190) [Jean-François Roche]\n  + DS VMware: add i386 arch dir to deployPkg plugin search path\n    [PengpengSun]\n  + LXD moved from linuxcontainers.org to Canonical [Simon Deziel]\n  + cc_mounts.py: Add note about issue with creating mounts inside mounts\n    (#4232) [dermotbradley]\n  + lxd: install lxd from snap, not deb if absent in image\n  + landscape: use landscape-config to write configuration\n  + Add deprecation log during init of DataSourceDigitalOcean (#4194)\n    [tyb-truth]\n  + doc: fix typo on apt.primary.arches (#4238) [Dan Bungert]\n  + Inspect systemd state for cloud-init status (#4230)\n  + instance-data: add system-info and features to combined-cloud-config\n    (#4224)\n  + systemd: Block login until config stage completes (#2111) (LP: #2013403)\n  + tests: proposed should invoke apt-get install -t=\u003crelease\u003e-proposed\n    (#4235)\n  + cloud.cfg.tmpl: reinstate ca_certs entry (#4236) [dermotbradley]\n  + Remove feature flag override ability (#4228)\n  + tests: drop stray unrelated file presence test (#4227)\n  + Update LXD URL (#4223) [Sally]\n  + schema: add network v1 schema definition and validation functions\n  + tests: daily PPA for devel series is version 99.daily update tests to\n    match (#4225)\n  + instance-data: write /run/cloud-init/combined-cloud-config.json\n  + mount parse: Fix matching non-existent directories (#4222) [Mina Galić]\n  + Specify build-system for pep517 (#4218)\n  + Fix network v2 metric rendering (#4220)\n  + Migrate content out of FAQ page (SD-1187) (#4205) [Sally]\n  + setup: fix generation of init templates (#4209) [Mina Galić]\n  + docs: Correct some bootcmd example wording\n  + fix changelog\n  + tests: reboot client to assert x-shellscript-per-boot is triggered\n  + nocloud: parse_cmdline no longer detects nocloud-net datasource (#4204)\n    (LP: 4203, #2025180)\n  + Add docstring and typing to mergemanydict (#4200)\n  + BSD: add dsidentify to early startup scripts (#4182) [Mina Galić]\n  + handler: report errors on skipped merged cloud-config.txt parts\n    (LP: #1999952)\n  + Add cloud-init summit writeups (#4179) [Sally]\n  + tests: Update test_clean_log for oci (#4187)\n  + gce: improve ephemeral fallback NIC selection (CPC-2578) (#4163)\n  + tests: pin pytest 7.3.1 to avoid adverse testpaths behavior (#4184)\n  + Ephemeral Networking for FreeBSD (#2165) [Mina Galić]\n  + Clarify directory syntax for nocloud local filesystem. (#4178)\n  + Set default renderer as sysconfig for centos/rhel (#4165) [Ani Sinha]\n  + Test static routes and netplan 0.106\n  + FreeBSD fix parsing of mount and mount options (#2146) [Mina Galić]\n  + test: add tracking bug id (#4164)\n  + tests: can't match MAC for LXD container veth due to netplan 0.106\n    (#4162)\n  + Add kaiwalyakoparkar as a contributor (#4156) [Kaiwalya Koparkar]\n  + BSD: remove datasource_list from cloud.cfg template (#4159) [Mina Galić]\n  + launching salt-minion in masterless mode (#4110) [Denis Halturin]\n  + tools: fix run-container builds for rockylinux/8 git hash mismatch\n    (#4161)\n  + fix doc lint: spellchecker tripped up (#4160) [Mina Galić]\n  + Support Ephemeral Networking for BSD (#2127)\n  + Added / fixed support for static routes on OpenBSD and FreeBSD (#2157)\n    [Kadir Mueller]\n  + cc_rsyslog: Refactor for better multi-platform support (#4119)\n    [Mina Galić] (LP: #1798055)\n  + tests: fix test_lp1835584 (#4154)\n  + cloud.cfg mod names: docs and rename salt_minion and set_password (#4153)\n  + vultr: remove check_route check (#2151) [Jonas Chevalier]\n  + Update SECURITY.md (#4150) [Indrranil Pawar]\n  + Update CONTRIBUTING.rst (#4149) [Indrranil Pawar]\n  + Update .github-cla-signers (#4151) [Indrranil Pawar]\n  + Standardise module names in cloud.cfg.tmpl to only use underscore\n    (#4128) [dermotbradley]\n  + Modify PR template so autoclose works\nFrom 23.2.2\n  + Fix NoCloud kernel commandline key parsing (#4273) (Fixes: #4271)\n    (LP: #2028562)\n  + Fix reference before assignment (#4292) (Fixes: #4288) (LP: #2028784)\nFrom 23.2.1\n  + nocloud: Fix parse_cmdline detection of nocloud-net datasource (#4204)\n    (Fixes: 4203) (LP: #2025180)\nFrom 23.2\n  + BSD: simplify finding MBR partitions by removing duplicate code\n   [Mina Galić]\n  + tests: bump pycloudlib version for mantic builds\n  + network-manager: Set higher autoconnect priority for nm keyfiles (#3671)\n    [Ani Sinha]\n  + alpine.py: change the locale file used (#4139) [dermotbradley]\n  + cc_ntp: Sync up with current FreeBSD ntp.conf (#4122) [Mina Galić]\n  + config: drop refresh_rmc_and_interface as RHEL 7 no longer supported\n    [Robert Schweikert]\n  + docs: Add feedback button to docs\n  + net/sysconfig: enable sysconfig renderer if network manager has ifcfg-rh\n    plugin (#4132) [Ani Sinha]\n  + For Alpine use os-release PRETTY_NAME (#4138) [dermotbradley]\n  + network_manager: add a method for ipv6 static IP configuration (#4127)\n    [Ani Sinha]\n  + correct misnamed template file host.mariner.tmpl (#4124) [dermotbradley]\n  + nm: generate ipv6 stateful dhcp config at par with sysconfig (#4115)\n    [Ani Sinha]\n  + Add templates for GitHub Issues\n  + Add 'peers' and 'allow' directives in cc_ntp (#3124) [Jacob Salmela]\n  + FreeBSD: Fix user account locking (#4114) [Mina Galić] (GH: #1854594)\n  + FreeBSD: add ResizeGrowFS class to cc_growpart (#2334) [Mina Galić]\n  + Update tests in Azure TestCanDevBeReformatted class (#2771)\n    [Ksenija Stanojevic]\n  + Replace Launchpad references with GitHub Issues\n  + Fix KeyError in iproute pformat (#3287) [Dmitry Zykov]\n  + schema: read_cfg_paths call init.fetch to lookup /v/l/c/instance\n  + azure/errors: introduce reportable errors for imds (#3647)\n    [Chris Patterson]\n  + FreeBSD (and friends): better identify MBR slices (#2168)\n    [Mina Galić] (LP: #2016350)\n  + azure/errors: add host reporting for dhcp errors (#2167)\n    [Chris Patterson]\n  + net: purge blacklist_drivers across net and azure (#2160)\n    [Chris Patterson]\n  + net: refactor hyper-v VF filtering and apply to get_interfaces() (#2153)\n    [Chris Patterson]\n  + tests: avoid leaks to underlying filesystem for /etc/cloud/clean.d\n    (#2251)\n  + net: refactor find_candidate_nics_on_linux() to use get_interfaces()\n    (#2159) [Chris Patterson]\n  + resolv_conf: Allow \u003e 3 nameservers (#2152) [Major Hayden]\n  + Remove mount NTFS error message (#2134) [Ksenija Stanojevic]\n  + integration tests: fix image specification parsing (#2166)\n  + ci: add hypothesis scheduled GH check (#2149)\n  + Move supported distros list to docs (#2162)\n  + Fix logger, use instance rather than module function (#2163)\n  + README: Point to Github Actions build status (#2158)\n  + Revert 'fix linux-specific code on bsd (#2143)' (#2161)\n  + Do not generate dsa and ed25519 key types when crypto FIPS mode is\n    enabled (#2142) [Ani Sinha] (LP: 2017761)\n  + Add documentation label automatically (#2156)\n  + sources/azure: report success to host and introduce kvp module (#2141)\n    [Chris Patterson]\n  + setup.py: use pkg-config for udev/rules path (#2137) [dankm]\n  + openstack/static: honor the DNS servers associated with a network\n    (#2138) [Gonéri Le Bouder]\n  + fix linux-specific code on bsd (#2143)\n  + cli: schema validation of jinja template user-data (SC-1385) (#2132)\n    (LP: #1881925)\n  + gce: activate network discovery on every boot (#2128)\n  + tests: update integration test to assert 640 across reboots (#2145)\n  + Make user/vendor data sensitive and remove log permissions (#2144)\n    (LP: #2013967)\n  + Update kernel command line docs (SC-1457) (#2133)\n  + docs: update network configuration path links (#2140) [d1r3ct0r]\n  + sources/azure: report failures to host via kvp (#2136) [Chris Patterson]\n  + net: Document use of `ip route append` to add routes (#2130)\n  + dhcp: Add missing mocks (#2135)\n  + azure/imds: retry fetching metadata up to 300 seconds (#2121)\n    [Chris Patterson]\n  + [1/2] DHCP: Refactor dhcp client code  (#2122)\n  + azure/errors: treat traceback_base64 as string (#2131) [Chris Patterson]\n  + azure/errors: introduce reportable errors (#2129) [Chris Patterson]\n  + users: schema permit empty list to indicate create no users\n  + azure: introduce identity module (#2116) [Chris Patterson]\n  + Standardize disabling cloud-init on non-systemd (#2112)\n  + Update .github-cla-signers (#2126) [Rob Tongue]\n  + NoCloud: Use seedfrom protocol to determine mode (#2107)\n  + rhel: Remove sysvinit files. (#2114)\n  + tox.ini: set -vvvv --showlocals for pytest (#2104) [Chris Patterson]\n  + Fix NoCloud kernel commandline semi-colon args\n  + run-container: make the container/VM timeout configurable (#2118)\n    [Paride Legovini]\n  + suse: Remove sysvinit files. (#2115)\n  + test: Backport assert_call_count for old requests (#2119)\n  + Add 'licebmi' as contributor (#2113) [Mark Martinez]\n  + Adapt DataSourceScaleway to upcoming IPv6 support (#2033)\n    [Louis Bouchard]\n  + rhel: make sure previous-hostname file ends with a new line (#2108)\n    [Ani Sinha]\n  + Adding contributors for DataSourceAkamai (#2110) [acourdavAkamai]\n  + Cleanup ephemeral IP routes on exception (#2100) [sxt1001]\n  + commit 09a64badfb3f51b1b391fa29be19962381a4bbeb [sxt1001] (LP: #2011291)\n  + Standardize kernel commandline user interface (#2093)\n  + config/cc_resizefs: fix do_resize arguments (#2106) [Chris Patterson]\n  + Fix test_dhclient_exits_with_error (#2105)\n  + net/dhcp: catch dhclient failures and raise NoDHCPLeaseError (#2083)\n    [Chris Patterson]\n  + sources/azure: move pps handling out of _poll_imds() (#2075)\n    [Chris Patterson]\n  + tests: bump pycloudlib version (#2102)\n  + schema: do not manipulate draft4 metaschema for jsonschema 2.6.0 (#2098)\n  + sources/azure/imds: don't count timeout errors as connection errors\n    (#2074) [Chris Patterson]\n  + Fix Python 3.12 unit test failures (#2099)\n  + integration tests: Refactor instance checking (#1989)\n  + ci: migrate remaining jobs from travis to gh (#2085)\n  + missing ending quote in instancedata docs(#2094) [Hong L]\n  + refactor: stop passing log instances to cc_* handlers (#2016) [d1r3ct0r]\n  + tests/vmware: fix test_no_data_access_method failure (#2092)\n    [Chris Patterson]\n  + Don't change permissions of netrules target (#2076) (LP: #2011783)\n  + tests/sources: patch util.get_cmdline() for datasource tests (#2091)\n    [Chris Patterson]\n  + macs: ignore duplicate MAC for devs with driver driver qmi_wwan (#2090)\n    (LP: #2008888)\n  + Fedora: Enable CA handling (#2086) [František Zatloukal]\n  + Send dhcp-client-identifier for InfiniBand ports (#2043) [Waleed Mousa]\n  + cc_ansible: complete the examples and doc (#2082) [Yves]\n  + bddeb: for dev package, derive debhelper-compat from host system\n  + apport: only prompt for cloud_name when instance-data.json is absent\n  + datasource: Optimize datasource detection, fix bugs (#2060)\n  + Handle non existent ca-cert-config situation (#2073) [Shreenidhi Shedi]\n  + sources/azure: add networking check for all source PPS (#2061)\n    [Chris Patterson]\n  + do not attempt dns resolution on ip addresses (#2040)\n  + chore: fix style tip (#2071)\n  + Fix metadata IP in instancedata.rst (#2063) [Brian Haley]\n  + util: Pass deprecation schedule in deprecate_call() (#2064)\n  + config: Update grub-dpkg docs (#2058)\n  + docs: Cosmetic improvements and styling (#2057) [s-makin]\n  + cc_grub_dpkg: Added UEFI support (#2029) [Alexander Birkner]\n  + tests: Write to /var/spool/rsyslog to adhere to apparmor profile (#2059)\n  + oracle-ds: prefer system_cfg over ds network config source (#1998)\n    (LP: #1956788)\n  + Remove dead code (#2038)\n  + source: Force OpenStack when it is only option (#2045) (LP: #2008727)\n  + cc_ubuntu_advantage: improve UA logs discovery\n  + sources/azure: fix regressions in IMDS behavior (#2041) [Chris Patterson]\n  + tests: fix test_schema (#2042)\n  + dhcp: Cleanup unused kwarg (#2037)\n  + sources/vmware/imc: fix-missing-catch-few-negtive-scenarios (#2027)\n    [PengpengSun]\n  + dhclient_hook: remove vestigal dhclient_hook command (#2015)\n  + log: Add standardized deprecation tooling (SC-1312) (#2026)\n  + Enable SUSE based distros for ca handling (#2036) [Robert Schweikert]\nFrom 23.1.2\n  + Make user/vendor data sensitive and remove log permissions\n    (LP: #2013967) (CVE-2023-1786)\n\n- Remove six dependency (bsc#1198269)\n- Update to version 22.4 (bsc#1201010)\n\n  ","modified":"2026-02-04T03:21:19.928924Z","published":"2024-01-16T12:50:57Z","related":["CVE-2023-1786"],"upstream":["CVE-2023-1786"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240128-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1198269"},{"type":"REPORT","url":"https://bugzilla.suse.com/1201010"},{"type":"REPORT","url":"https://bugzilla.suse.com/1214169"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215740"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215794"},{"type":"REPORT","url":"https://bugzilla.suse.com/1216007"},{"type":"REPORT","url":"https://bugzilla.suse.com/1216011"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1786"}],"affected":[{"package":{"name":"cloud-init","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","purl":"pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3-150100.8.71.1"}]}],"ecosystem_specific":{"binaries":[{"cloud-init-config-suse":"23.3-150100.8.71.1","cloud-init":"23.3-150100.8.71.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0128-1.json"}},{"package":{"name":"cloud-init","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","purl":"pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3-150100.8.71.1"}]}],"ecosystem_specific":{"binaries":[{"cloud-init-config-suse":"23.3-150100.8.71.1","cloud-init":"23.3-150100.8.71.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0128-1.json"}},{"package":{"name":"cloud-init","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","purl":"pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3-150100.8.71.1"}]}],"ecosystem_specific":{"binaries":[{"cloud-init-config-suse":"23.3-150100.8.71.1","cloud-init":"23.3-150100.8.71.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0128-1.json"}},{"package":{"name":"cloud-init","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","purl":"pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3-150100.8.71.1"}]}],"ecosystem_specific":{"binaries":[{"cloud-init-config-suse":"23.3-150100.8.71.1","cloud-init":"23.3-150100.8.71.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0128-1.json"}},{"package":{"name":"cloud-init","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","purl":"pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3-150100.8.71.1"}]}],"ecosystem_specific":{"binaries":[{"cloud-init-config-suse":"23.3-150100.8.71.1","cloud-init":"23.3-150100.8.71.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0128-1.json"}},{"package":{"name":"cloud-init","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/cloud-init&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3-150100.8.71.1"}]}],"ecosystem_specific":{"binaries":[{"cloud-init-config-suse":"23.3-150100.8.71.1","cloud-init-doc":"23.3-150100.8.71.1","cloud-init":"23.3-150100.8.71.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0128-1.json"}},{"package":{"name":"cloud-init","ecosystem":"openSUSE:Leap 15.5","purl":"pkg:rpm/opensuse/cloud-init&distro=openSUSE%20Leap%2015.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3-150100.8.71.1"}]}],"ecosystem_specific":{"binaries":[{"cloud-init-doc":"23.3-150100.8.71.1","cloud-init":"23.3-150100.8.71.1","cloud-init-config-suse":"23.3-150100.8.71.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0128-1.json"}}],"schema_version":"1.7.3"}