CVE-2016-8637

A local information disclosure issue was found in dracut before 045 when
generating initramfs images with world-readable permissions when ‘early
cpio’ is used, such as when including microcode updates. Local attacker can
use this to obtain sensitive information from these files, such as
encryption keys or credentials.