Most recent entries from all

ALSA-2025:10844 — Important: cloud-init security update

2026-10-12T16:22:40.495602+00:00

Affected: AlmaLinux:10: cloud-init

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.

Security Fix(es):

* cloud-init: Cloud init permissions flaw (CVE-2024-6174)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-10809

2026-10-12T16:22:40.495656+00:00

bdu:2025-10809

BELL-CVE-2024-6174

2026-10-12T16:22:40.495673+00:00

Affected: Alpaquita:23: cloud-init, Alpaquita:stream: cloud-init

certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

2026-10-12T16:22:40.495692+00:00

certfr-2025-avi-0756

EUVD-2026-245960

2026-10-12T16:22:40.495707+00:00

EUVD-2026-245960

fkie_cve-2024-6174

2026-10-12T16:22:40.495717+00:00

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

GHSA-w8g9-wp36-fchj

2026-10-12T16:22:40.495738+00:00

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

msrc_CVE-2024-6174 — When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To preve…

2026-10-12T16:22:40.495752+00:00

msrc_CVE-2024-6174

OESA-2025-1783 — cloud-init security update

2026-10-12T16:22:40.495767+00:00

Affected: openEuler:20.03-LTS-SP4: cloud-init

Cloud-init is the defacto multi-distribution package that handles early initialization of a cloud instance. Security Fix(es):

cloud-init is an industry-standard multi-distribution method for cross-platform cloud instance initialization by Canonical. There is a security vulnerability in cloud-init, which originates from granting root access to hardcoded URLs during detection by non-x86 platforms.(CVE-2024-6174)

openSUSE-RU-2026:20129-1 — Recommended update for cloud-init

2026-10-12T16:22:40.495788+00:00

Recommended update for cloud-init

RHSA-2025:10844 — Red Hat Security Advisory: cloud-init security update

2026-10-12T16:22:40.495804+00:00

cloud-init: Cloud init permissions flaw

SUSE-RU-2026:20174-1 — Recommended update for cloud-init

2026-10-12T16:22:40.495817+00:00

Recommended update for cloud-init

UBUNTU-CVE-2024-6174

2026-10-12T16:22:40.495830+00:00

Affected: Ubuntu:Pro:16.04:LTS: cloud-init, Ubuntu:Pro:18.04:LTS: cloud-init, Ubuntu:Pro:20.04:LTS: cloud-init, Ubuntu:22.04:LTS: cloud-init, Ubuntu:24.04:LTS: cloud-init

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

WID-SEC-W-2025-1539 — Red Hat Enterprise Linux (cloud-init): Schwachstelle ermöglicht Erlangen von Administratorrechten

2026-10-12T16:22:40.495853+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in der cloud-init Komponente von Red Hat Enterprise Linux ausnutzen, um Administratorrechte zu erlangen.