{"id":"CVE-2020-8632","aliases":["DEBIAN-CVE-2020-8632","DLA-2113-1","EUVD-2020-29480","GHSA-xcwr-9f5c-qg65","MGASA-2020-0295","RHSA-2020:3898","RHSA-2020:4650","SUSE-SU-2020:0585-1","SUSE-SU-2020:0751-1","SUSE-SU-2020:0818-1","UBUNTU-CVE-2020-8632","openSUSE-SU-2020:0400-1","openSUSE-SU-2024:10688-1"],"status":"published","title":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a...","description":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0038,"percentile":0.32286,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-521","CWE-522"],"published":"2020-02-05T13:40:05Z","modified":"2026-10-26T12:02:51Z","fixes":[{"ecosystem":"Debian:12","package":"cloud-init","fixed_in":["19.4-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cloud-init","fixed_in":["19.4-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cloud-init","fixed_in":["19.4-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"cloud-init","fixed_in":["20.2-45-g5f7825e2-0ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"cloud-init","fixed_in":["20.1-10-g71af48df-0ubuntu5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"cloud-init","fixed_in":["21.4-25-g039c40f9-0ubuntu1~22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.4-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.4-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.4-2"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.6~bzr976-2+deb8u1"}]}],"versions":["0.7.6~bzr976-2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.5-7.1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.4-7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.4-11.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.4-5.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.4-8.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.4-37.39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.7~bzr1149-0ubuntu1","0.7.7~bzr1154-0ubuntu1","0.7.7~bzr1155-0ubuntu1","0.7.7~bzr1156-0ubuntu1","0.7.7~bzr1156-0ubuntu2","0.7.7~bzr1160-0ubuntu1","0.7.7~bzr1176-0ubuntu1","0.7.7~bzr1182-0ubuntu1","0.7.7~bzr1189-0ubuntu1","0.7.7~bzr1192-0ubuntu1","0.7.7~bzr1192-0ubuntu2","0.7.7~bzr1200-0ubuntu1","0.7.7~bzr1208-0ubuntu1","0.7.7~bzr1209-0ubuntu1","0.7.7~bzr1212-0ubuntu1","0.7.7~bzr1246-0ubuntu1~16.04.1","0.7.7~bzr1256-0ubuntu1~16.04.1","0.7.8-1-g3705bb5-0ubuntu1~16.04.1","0.7.8-1-g3705bb5-0ubuntu1~16.04.3","0.7.8-49-g9e904bb-0ubuntu1~16.04.1","0.7.8-49-g9e904bb-0ubuntu1~16.04.2","0.7.8-49-g9e904bb-0ubuntu1~16.04.3","0.7.8-49-g9e904bb-0ubuntu1~16.04.4","0.7.9-0ubuntu1~16.04.2","0.7.9-48-g1c795b9-0ubuntu1~16.04.1","0.7.9-90-g61eb03fe-0ubuntu1~16.04.1","0.7.9-113-g513e99e0-0ubuntu1~16.04.1","0.7.9-153-g16a7302f-0ubuntu1~16.04.1","0.7.9-153-g16a7302f-0ubuntu1~16.04.2","0.7.9-233-ge586fe35-0ubuntu1~16.04.1","0.7.9-233-ge586fe35-0ubuntu1~16.04.2","17.1-27-geb292c18-0ubuntu1~16.04.1","17.1-46-g7acc9e68-0ubuntu1~16.04.1","17.2-35-gf576b2a2-0ubuntu1~16.04.2","18.2-4-g05926e48-0ubuntu1~16.04.1","18.2-4-g05926e48-0ubuntu1~16.04.2","18.3-9-g2e62cb8a-0ubuntu1~16.04.2","18.4-0ubuntu1~16.04.2","18.5-21-g8ee294d5-0ubuntu1~16.04.1","18.5-45-g3554ffe8-0ubuntu1~16.04.1","19.1-1-gbaa47854-0ubuntu1~16.04.1","19.2-24-ge7881d5c-0ubuntu1~16.04.1","19.2-36-g059d049c-0ubuntu1~16.04.1","19.2-36-g059d049c-0ubuntu2~16.04.1","19.3-41-gc4735dd3-0ubuntu1~16.04.1","19.4-33-gbb4131a2-0ubuntu1~16.04.1","20.2-45-g5f7825e2-0ubuntu1~16.04.1","20.3-2-g371b392c-0ubuntu1~16.04.1","20.4-0ubuntu1~16.04.1","20.4-0ubuntu1~16.04.2","20.4.1-0ubuntu1~16.04.1","21.1-19-gbad84ad4-0ubuntu1~16.04.1","21.1-19-gbad84ad4-0ubuntu1~16.04.2","21.1-19-gbad84ad4-0ubuntu1~16.04.4","21.1-19-gbad84ad4-0ubuntu1~16.04.4+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.2-45-g5f7825e2-0ubuntu1~18.04.1"}]}],"versions":["17.1-18-gd4f70470-0ubuntu1","17.1-25-g17a15f9e-0ubuntu1~17.10.1","17.1-25-g17a15f9e-0ubuntu1","17.1-27-geb292c18-0ubuntu1","17.1-41-g76243487-0ubuntu1","17.1-46-g7acc9e68-0ubuntu1","17.1-51-g05b2308a-0ubuntu1","17.1-53-ga5dc0f42-0ubuntu1","17.1-58-g703241a3-0ubuntu1","17.1-60-ga30a3bb5-0ubuntu1","17.2-1-g4089e20c-0ubuntu1","17.2-9-gdf24daa8-0ubuntu1","17.2-13-g6299e8d0-0ubuntu1","17.2-20-g32a6a176-0ubuntu1","17.2-25-gc03bdd3d-0ubuntu1","17.2-30-gf7deaf15-0ubuntu1","17.2-34-g644048e3-0ubuntu1","18.1-0ubuntu1","18.1-5-g40e77380-0ubuntu1","18.1-17-g97012fbb-0ubuntu1","18.1-23-gde34dc7c-0ubuntu1","18.1-26-g685f9901-0ubuntu1","18.1-35-ge0f644b7-0ubuntu1","18.1-35-ge0f644b7-0ubuntu2","18.2-0ubuntu1","18.2-4-g05926e48-0ubuntu1","18.2-4-g05926e48-0ubuntu2","18.2-9-g49b562c9-0ubuntu1","18.2-14-g6d48d265-0ubuntu1","18.2-27-g6ef92c98-0ubuntu1~18.04.1","18.3-9-g2e62cb8a-0ubuntu1~18.04.2","18.4-0ubuntu1~18.04.1","18.5-21-g8ee294d5-0ubuntu1~18.04.1","18.5-45-g3554ffe8-0ubuntu1~18.04.1","19.1-1-gbaa47854-0ubuntu1~18.04.1","19.2-24-ge7881d5c-0ubuntu1~18.04.1","19.2-36-g059d049c-0ubuntu1~18.04.1","19.2-36-g059d049c-0ubuntu2~18.04.1","19.3-41-gc4735dd3-0ubuntu1~18.04.1","19.4-33-gbb4131a2-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.1-10-g71af48df-0ubuntu5"}]}],"versions":["19.2-36-g059d049c-0ubuntu3","19.2-78-ge8138959-0ubuntu1","19.3-0ubuntu1","19.3-23-gfb04493e-0ubuntu1","19.3-30-g4bc399e0-0ubuntu1","19.3-40-gf69d33a7-0ubuntu1","19.3-41-gc4735dd3-0ubuntu1","19.3-74-g129b1c4e-0ubuntu1","19.4-1-g8c96cbc1-0ubuntu1","19.4-16-gf8950d63-0ubuntu1","19.4-31-g3f6192b3-0ubuntu1","19.4-33-gbb4131a2-0ubuntu1","19.4-56-g06e324ff-0ubuntu1","20.1-0ubuntu1","20.1-5-g67c8e53c-0ubuntu1","20.1-9-g1f860e5a-0ubuntu1","20.1-10-g71af48df-0ubuntu1","20.1-10-g71af48df-0ubuntu2","20.1-10-g71af48df-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.4-25-g039c40f9-0ubuntu1~22.04.1"}]}],"versions":["21.3-1-g6803368d-0ubuntu3","21.4-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.4-lp151.2.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.2-1.2"}]}],"bundled":3}],"products":[{"vendor":"canonical","product":"cloud-init"},{"vendor":"debian","product":"debian_linux"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/1860795","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/canonical/cloud-init/pull/189","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00021.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00042.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8632","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xcwr-9f5c-qg65"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-8632","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0295.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26236","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2113","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3898","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1574338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1748015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1821679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1821999","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3898.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10896","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10896","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10896","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8631","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8631","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8631","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8632","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8632","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4650","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1761598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1794664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1822343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1833874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1834173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1839662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1840648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1846240","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4650.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200585-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1162936","tags":["report"]},{"url":"https://bugzilla.suse.com/1162937","tags":["report"]},{"url":"https://bugzilla.suse.com/1163178","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8632","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200751-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200818-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-8632","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HP4VDWEKECKD5KSKGQVLYNIVVMBFT5EB/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-0816","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-8632","description":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.","status":"published","published":"2020-02-05T13:40:05Z","modified":"2024-08-04T10:03:46.284Z","updated_at":"2026-11-02T14:35:50.545879Z"}],"euvd":[{"id":"EUVD-2020-29480","description":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.","status":"published","published":"2020-02-05T13:40:05Z","modified":"2024-08-04T10:03:46Z","updated_at":"2026-11-03T03:07:56.602123Z"}],"ghsa":[{"id":"GHSA-xcwr-9f5c-qg65","title":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a...","description":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.","status":"published","published":"2022-05-24T17:08:06Z","modified":"2023-01-29T05:01:15Z","cwes":["CWE-521","CWE-522"],"updated_at":"2026-11-02T14:44:46.468507Z"}],"nvd":[{"id":"CVE-2020-8632","description":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.","status":"published","published":"2020-02-05T14:15:11.653Z","modified":"2026-06-17T03:26:40.933Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-521"],"updated_at":"2026-11-02T14:05:53.837808Z"}],"osv":[{"id":"CVE-2020-8632","description":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.","status":"published","published":"2020-02-05T14:15:11.653Z","modified":"2026-10-20T10:54:25.412803822Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2020-8632","description":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.","status":"published","published":"2020-02-05T14:15:11.653Z","modified":"2026-10-26T12:02:51.979612505Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"RHSA-2020:3898","title":"Red Hat Security Advisory: cloud-init security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:46:53Z","modified":"2026-07-01T10:05:49Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4650","title":"Red Hat Security Advisory: cloud-init security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:47:00Z","modified":"2025-11-22T12:11:35Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2020-8632","description":"In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.","status":"published","published":"2020-02-05T14:15:00Z","modified":"2025-09-08T16:45:59Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"DLA-2113-1","title":"cloud-init - security update","status":"published","published":"2020-02-21T00:00:00Z","modified":"2026-03-09T01:18:38.531429Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"MGASA-2020-0295","title":"Updated cloud-init packages fix security vulnerability","description":"In cloud-init, relies on Mersenne Twister for a random password, which\nmakes it easier for attackers to predict passwords, because rand_str in\ncloudinit/util.py calls the random.choice function (CVE-2020-8631).\n\nIn cloud-init, rand_user_password in cloudinit/config/cc_set_passwords.py\nhas a small default pwlen value, which makes it easier for attackers to\nguess passwords (CVE-2020-8632).\n","status":"published","published":"2020-07-31T23:25:42Z","modified":"2026-04-16T04:41:52.814478841Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0400-1","title":"Security update for cloud-init","description":"This update for cloud-init fixes the following security issues:\n\n- CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG (bsc#1162937).\n- CVE-2020-8632: Increased the default random password length from 9 to 20 (bsc#1162936).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-03-28T23:18:53Z","modified":"2026-02-04T03:24:22.07992Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10688-1","title":"cloud-init-21.2-1.2 on GA media","description":"These are all security issues fixed in the cloud-init-21.2-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:12:57.211409Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:0585-1","title":"Security update for cloud-init","description":"This update for cloud-init fixes the following security issues:\n\n- CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG (bsc#1162937).\n- CVE-2020-8632: Increased the default random password length from 9 to 20 (bsc#1162936).\n","status":"published","published":"2020-03-04T10:58:04Z","modified":"2026-02-04T03:26:06.500642Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0751-1","title":"Security update for cloud-init","description":"This update for cloud-init fixes the following security issues:\n\n- CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG (bsc#1162937).\n- CVE-2020-8632: Increased the default random password length from 9 to 20 (bsc#1162936).\n","status":"published","published":"2020-03-23T15:32:49Z","modified":"2026-02-04T02:45:22.509339Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0818-1","title":"Security update for cloud-init","description":"This update for cloud-init fixes the following security issues:\n\n- CVE-2020-8631: Replaced the theoretically predictable deterministic random number generator with the system RNG (bsc#1162937).\n- CVE-2020-8632: Increased the default random password length from 9 to 20 (bsc#1162936).\n","status":"published","published":"2020-03-31T07:23:28Z","modified":"2026-02-04T04:39:56.746516Z","updated_at":"2026-11-02T15:53:47.634847Z"}]}}