A new Debian Linux update has been published: DLA 2601-1: cloud-init security update
A cloud-init security update has been released for Debian GNU/Linux 9 LTS to address an issue where unhashed password will be written to a world-readable local file.Read more @ Linux Compatible