ALT-PU-2025-16519: package cloud-init update to version 25.1.4-alt1
Источник
errata.altlinux.org
Дата публикации
20.08.2025
Дата обновления
20.08.2025
Устраненные уязвимости
4
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
Описание
This update upgrades cloud-init to version 25.1.4-alt1.
Устраненные уязвимости4
Связанные уязвимости
CVSS3: 5.3
ubuntu
больше 1 года назад
cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.
CVSS3: 5.9
redhat
больше 1 года назад
cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.