Important: aws-cfn-bootstrap

2017-09-14T22:32:00
ID ALAS-2017-895
Type amazon
Reporter Amazon
Modified 2017-09-14T22:32:00

Description

Issue Overview:

The default umask value is set to 022 to address a privilege escalation security vulnerability.

Affected Packages:

aws-cfn-bootstrap

Issue Correction:

  1. Run yum update aws-cfn-bootstrap to update your system.
  2. Update the AWS::CloudFormation::Init metadata section of your template, specifically the entries listed under the files key, to explicitly specify the mode field as documented at http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-init.html . We recommend setting the mode to explicitly disable permissions for non-owners. Alternatively, you can also choose to explicitly change the mode of the files listed in your template, by directly logging on to the instance.
  3. Restart the cfn-hup process: service cfn-hup restart

New Packages:

noarch:  
    aws-cfn-bootstrap-1.4-22.14.amzn1.noarch

src:  
    aws-cfn-bootstrap-1.4-22.14.amzn1.src