TI-2024-05723 CVE-2024-6174 · GHSA-w8g9-wp36-fchj
Improper authentication in Canonical cloud-init
Priority MEDIUM 40
When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address.
RHSA-2025:11337
cloud-init security update
Released 2025-07-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) cloud-init-21.1-15.el8_6.4
- Red Hat Enterprise Linux AppStream E4S (v.8.6) cloud-init-21.1-15.el8_6.4
- Red Hat Enterprise Linux AppStream TUS (v.8.6) cloud-init-21.1-15.el8_6.4