MiracleLinux 8 : cloud-init-19.4-1.el8.7 (AXSA:2020-635:05)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-635:05 advisory. cloud-init: default configuration disabled deletion of SSH host keys CVE-2018-10896 The default cloud-init configuration, in cloud-init 0.6.2 and newer,...

[SECURITY] Fedora 43 Update: python-inline-snapshot-0.30.1-1.fc43

Golden master/snapshot/approval testing library which puts the values right into your source code...

NewStart CGSL MAIN 6.06 : cloud-init Multiple Vulnerabilities (NS-SA-2025-0230)

The remote NewStart CGSL host, running version MAIN 6.06, has cloud-init packages installed that are affected by multiple vulnerabilities: - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included sshdeletekeys: 0, disabling cloud-init's deletion of ssh host keys. In some...

CVE-2018-10896

CVE-2018-10896 is confirmed in multiple Nessus/OpenVAS entries tied to cloud-init. The issue arises from the default cloud-init configuration (ssh_deletekeys: 0) introduced in cloud-init 0.6.2 and newer, which disables deletion of SSH host keys on new instances. This can allow cloned golden-maste...

iPhone 4S Falls at Hacker Contest; New iPhone 5 Vulnerable to Same Exploit

Two security researchers have already chipped the armor of the new iPhone, scheduled for release tomorrow. Joost Pol and Daan Keuper won the mobile Pwn2Own contest yesterday at EUSecWest event in Amsterdam by compromising a fully patched iPhone 4S device and stealing contacts, browsing history,...