[ubuntu/jammy-security] cloud-init 25.1.4-0ubuntu0~22.04.1 (Accepted)
Federico Quattrin
federico.quattrin at canonical.com
Tue Jul 29 12:14:29 UTC 2025
cloud-init (25.1.4-0ubuntu0~22.04.1) jammy-security; urgency=medium
* refresh patches:
- d/p/revert-usr-lib-systemd-units.patch
* Upstream snapshot based on 25.1.4.
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/25.1.4/ChangeLog
- Bugs fixed in this snapshot:
+ fix: disable cloud-init when non-x86 environments have no DMI-data
and no strict datasources detected (LP: #2069607) (CVE-2024-6174)
cloud-init (25.1.3-0ubuntu0~22.04.1) jammy-security; urgency=medium
* d/cloud-init-base.postinst: move existing hotplug-cmd fifo to root-only
share dir (CVE-2024-11584)
* Upstream security bugfix release based on 25.1.3.
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/25.1.3/ChangeLog
- Bugs fixed in this snapshot:
- security: make hotplug socket only writable by root (LP: #2114229)
(CVE-2024-11584)
- security: make ds-identify behavior strict datasource discovery on
non-x86 platforms without DMI data (LP: #2069607) (CVE-2024-6174)
cloud-init (25.1.2-0ubuntu0~22.04.2) jammy; urgency=medium
* New bugfix release. (LP: #2113797)
- Revert relocation of systemd units and service files from /usr/lib
back to /lib so debhelper correctly enables cloud-init services in
postinst
cloud-init (25.1.2-0ubuntu0~22.04.1) jammy; urgency=medium
* Upstream snapshot based on 25.1.2. (LP: #2104165).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/25.1.2/ChangeLog
cloud-init (25.1.1-0ubuntu1~22.04.1) jammy; urgency=medium
* Drop cpicks which are now upstream:
- d/p/cpick-d75840be-fix-retry-AWS-hotplug-for-async-IMDS-5995
- d/p/cpick-84806336-chore-Add-feature-flag-for-manual-network-waiting
- d/p/cpick-c60771d8-test-pytestify-test_url_helper.py
- d/p/cpick-8810a2dc-test-Remove-CiTestCase-from-test_url_helper.py
- d/p/cpick-582f16c1-test-add-OauthUrlHelper-tests
- d/p/cpick-9311e066-fix-Update-OauthUrlHelper-to-use-readurl-exception_cb
* refresh patches
- d/p/deprecation-version-boundary.patch
- d/p/no-single-process.patch
- d/p/retain-ec2-default-net-update-events.patch
- d/p/revert-551f560d-cloud-config-after-snap-seeding.patch
* sort hunks within all patches (--sort on quilt refresh)
* d/cloud-init.templates:
- Move VMware before OVF. See GH-4030
- Enable CloudCIX by default
* Upstream snapshot based on 25.1.1.
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/25.1.1/ChangeLog
cloud-init (24.4.1-0ubuntu0~22.04.2) jammy; urgency=medium
* cherry-pick fixes for MAAS traceback (LP: #2100963)
- cherry-pick c60771d8: test: pytestify test_url_helper.py
- cherry-pick 8810a2dc: test: Remove CiTestCase from
test_url_helper.py
- cherry-pick 582f16c1: test: add OauthUrlHelper tests
- cherry-pick 9311e066: fix: Update OauthUrlHelper to use readurl
exception_cb
cloud-init (24.4.1-0ubuntu0~22.04.1) jammy; urgency=medium
* Add d/p/cpick-84806336-chore-Add-feature-flag-for-manual-network-waiting
- Pull in the upstream commit that makes it easier to patch out the
new systemd-networkd-wait-online behavior in e30549e8
* Add d/p/cpick-b817a679-fix-retry-AWS-hotplug-for-async-IMDS.patch
- Pull in the upstream commit works around a limitation in AWS's IMDS
(GH-5971) (LP: #2097319)
* Add d/p/no-remove-networkd-online.patch
- Revert breaking change on stable release (LP: #2094149)
* Update d/p/no-single-process.patch
- This patch missed waiting for mounts (LP: #2097441)
* refresh patches:
- d/p/cli-retain-file-argument-as-main-cmd-arg.patch
- d/p/revert-551f560d-cloud-config-after-snap-seeding.patch
* Upstream snapshot based on 24.4.1.
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/24.4.1/ChangeLog
(LP: #2094179, #2094208, #2094857, #2094858)
cloud-init (24.4-0ubuntu1~22.04.1) jammy; urgency=medium
* add d/p/grub-dpkg-support.patch
- Revert the removal of grub-dpkg from default modules
* refresh patches:
- d/p/cli-retain-file-argument-as-main-cmd-arg.patch
- d/p/expire-on-hashed-users.patch
- d/p/keep-dhclient-as-priority-client.patch
- d/p/no-nocloud-network.patch
- d/p/no-single-process.patch
- d/p/revert-551f560d-cloud-config-after-snap-seeding.patch
- d/p/status-do-not-remove-duplicated-data.patch
* Upstream snapshot based on 24.4. (LP: #2089577).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/24.4/ChangeLog
cloud-init (24.3.1-0ubuntu0~22.04.1) jammy; urgency=medium
* d/p/no-single-process.patch: Remove single process optimization
* d/p/no-nocloud-network.patch: Remove nocloud network feature
* refresh patches:
- d/p/cli-retain-file-argument-as-main-cmd-arg.patch
- d/p/revert-551f560d-cloud-config-after-snap-seeding.patch
* Upstream snapshot based on 24.3.1. (LP: #2079224).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/24.3.1/ChangeLog
cloud-init (24.2-0ubuntu1~22.04.1) jammy; urgency=medium
* d/control: remove netifaces due to GH-4634
* d/p/deprecation-version-boundary.patch: Pin deprecation version to 22.1
* drop d/p/do-not-block-user-login.patch: upstream 4981ea9 now orders
cloud-init.service Before=systemd-user-sessions.service
* refresh patches:
- d/p/cli-retain-file-argument-as-main-cmd-arg.patch
- d/p/keep-dhclient-as-priority-client.patch
- d/p/status-do-not-remove-duplicated-data.patch
- d/p/status-retain-recoverable-error-exit-code.patch
- d/p/revert-551f560d-cloud-config-after-snap-seeding.patch
- d/p/retain-ec2-default-net-update-events.patch
- d/p/retain-old-groups.patch
* d/po/templates.pot: update for wsl
* Upstream snapshot based on 24.2. (LP: #2071762).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/24.2/ChangeLog
* drop all d/p/cpick-* files as they are included in upstream snapshot
cloud-init (24.1.3-0ubuntu1~22.04.5) jammy; urgency=medium
* Upstream bug fix release based on 24.1.7
+ functional fixes in debian/patches:
- cpick-417ee551: fix(ec2): Ensure metadata exists before configuring PBR.
(LP: #2066979)
- cpick-d6776632: fix: Check renderer for netplan-specific code (#5321)
- cpick-d771d1f4: fix(ec2): Correctly identify netplan renderer (#5361)
(LP: #2066985)
+ test fixes in debian/patches:
- cpick-74dc7cce: test: Fix failing test_ec2.py test (#5324)
cloud-init (24.1.3-0ubuntu1~22.04.4) jammy; urgency=medium
* cherry-pick 51c6569f: fix(snapd): ubuntu do not snap refresh when
snap absent (LP: #2064132)
- fix in 24.1.3-0ubuntu1~20.04.2 did not handle package_upgrade case
cloud-init (24.1.3-0ubuntu1~22.04.3) jammy; urgency=medium
* d/p/cli-retain-file-argument-as-main-cmd-arg.patch: retain ability to
provide -f or --file on the command line before cloud-init subcommands
init, modules or single (LP: #2064300)
cloud-init (24.1.3-0ubuntu1~22.04.2) jammy; urgency=medium
* cherry-pick a6f7577d: bug(package_update): avoid snap refresh in
images without (LP: #2064132)
cloud-init (24.1.3-0ubuntu1~22.04.1) jammy; urgency=medium
* Upstream snapshot based on 24.1.3. (LP: #2056100).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/24.1.3/ChangeLog
cloud-init (24.1.2-0ubuntu1~22.04.1) jammy; urgency=medium
* refresh patches:
- d/p/retain-ec2-default-net-update-events.patch
* Upstream snapshot based on 24.1.2. (LP: #2056100).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/24.1.2/ChangeLog
cloud-init (24.1.1-0ubuntu1~22.04.1) jammy; urgency=medium
* d/apport-general-hook.py: Move apport hook to main branch
* d/cloud-init.maintscript: remove /etc/cloud/clean.d/README
* d/cloud-init.logrotate: add logrotate config for cloud-init
* d/cloud-init.templates: enable WSL datasource by default
* Drop d/p/retain-netplan-world-readable.patch:
- Limit perms to 600 of /etc/netplan/50-cloud-init.yaml instead of 644
(LP: #2053157)
* d/p/keep-dhclient-as-priority-client.patch:
- keep dhclient as default client
* d/p/revert-551f560d-cloud-config-after-snap-seeding.patch
- Retain systemd ordering cloud-config.service After=snapd.seeded.service
* d/p/retain-ec2-default-net-update-events.patch:
Reverts 4dbb08f5f0cc4f41cf9dd1474f0600a11510a3c9 to not change behavior
on stable releases.
* d/po/templates.pot: update for wsl
* d/cloud-init.postinst: change priority of hotplug rules.
Avoids LP #1946003 on upgraded systems. References:
[0] https://github.com/canonical/cloud-init/pull/4799
[1] commit/b519d861aff8b44a0610c176cb34adcbe28df144
* refresh patches:
- d/p/status-do-not-remove-duplicated-data.patch
- d/p/status-retain-recoverable-error-exit-code.patch
* Upstream snapshot based on 24.1.1. (LP: #2056100).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/24.1.1/ChangeLog
cloud-init (23.4.4-0ubuntu0~22.04.1) jammy; urgency=medium
* Upstream snapshot based on 23.4.4. (LP: #2055081).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.4.4/ChangeLog
cloud-init (23.4.3-0ubuntu0~22.04.1) jammy; urgency=medium
* Upstream snapshot based on 23.4.3. (LP: #2046483).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.4.3/ChangeLog
cloud-init (23.4.2-0ubuntu0~22.04.1) jammy; urgency=medium
* Upstream snapshot based on 23.4.2. (LP: #2045582).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.4.2/ChangeLog
- Bugs fixed in this snapshot: (LP: #2051147)
cloud-init (23.4.1-0ubuntu1~22.04.2) jammy; urgency=medium
* d/p/status-retain-recoverable-error-exit-code.patch:
Retain exit code in cloud-init status for recoverable errors.
(LP: #2048522).
cloud-init (23.4.1-0ubuntu1~22.04.1) jammy; urgency=medium
* d/p/retain-apt-pre-deb822.patch:
- Disable apt source list generation with DEB822 style
* refresh patches:
- d/p/status-do-not-remove-duplicated-data.patch
* d/changelog: amend 23.4-0 refresh patches entry
* Upstream snapshot based on 23.4.1. (LP: #2045582).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.4.1/ChangeLog
cloud-init (23.4-0ubuntu1~22.04.1) jammy; urgency=medium
* d/control: add python3-apt as Recommends to read APT config from apt_pkg
* d/p/status-do-not-remove-duplicated-data.patch:
- Revert behavior downstream, leave duplicate data
* d/p/series: bring back retain-old-groups.patch.
This patch was inadvertently dropped in 5d4a3cf.
* refresh patches:
- d/p/do-not-block-user-login.patch
* Upstream snapshot based on 23.4. (LP: #2045582).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.4/ChangeLog
cloud-init (23.3.3-0ubuntu0~22.04.1) jammy; urgency=medium
* Upstream snapshot based on 23.3.3. (LP: #2040291).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.3.3/ChangeLog
cloud-init (23.3.2-0ubuntu0~22.04.1) jammy; urgency=medium
* d/p/do-not-block-user-login.patch:
- Revert behavior, allow user login after cloud-init stage (LP: #2039505)
* Upstream snapshot based on 23.3.2. (LP: #2039453).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.3.2/ChangeLog
cloud-init (23.3.1-0ubuntu1~22.04.1) jammy; urgency=medium
* d/cloud-init.maintscript: Remove the unused hook-network-manager
conffile. (LP: #2027861)
* d/patches/retain-old-groups.patch:
- Retain original groups in cloud.cfg.tmpl
* Upstream snapshot based on upstream/main at 5509b790.
* d/control: Add python3-passlib as needed for testing
* d/cloud-init.templates: enable Akamai by default.
Add Akamai to the default templates to allow datasource discovery.
* d/po/templates.pot: refresh with debconf-updatepo
* Upstream snapshot based on 23.3.1. (LP: #2033310).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.3.1/ChangeLog
cloud-init (23.2.2-0ubuntu0~22.04.1) jammy; urgency=medium
* Upstream snapshot based on 23.2.2.
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.2.2/ChangeLog
- Bugs fixed in this snapshot: (LP: #2028562, #2028784)
cloud-init (23.2.1-0ubuntu0~22.04.1) jammy; urgency=medium
* Upstream snapshot based on 23.2.1. (LP: #2025180).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.2.1/ChangeLog
cloud-init (23.2-0ubuntu0~22.04.1) jammy; urgency=medium
* d/control: Remove pep8 dependency. It is no longer used.
* d/apport-general-hook.py: Add general apport hook to append cloud type,
image and instance size information to bug reports (LP: #1724623)
* d/cloud-init.preinst: Oracle to remove vestigial /etc/cloud.cloud.cfg.d/
99-disable-network-config.cfg because system config is now honored before
datasource config (LP: #1956788)
* d/cloud-init.preinst: Clean up vestigial
/etc/cloud/cloud.cfg.d/99-disable-network-activation.cfg on GCE instances
after fix in upstream google-guest-agent.
* Refresh patches against upstream/main
- d/p/expire-on-hashed-users.patch
- d/p/retain-netplan-world-readable.patch
* Upstream snapshot based on 23.2. (LP: #2023110).
List of changes from upstream can be found at
https://raw.githubusercontent.com/canonical/cloud-init/23.2/ChangeLog
Date: 2025-07-28 18:33:18.703017+00:00
Changed-By: Chad Smith <chad.smith at canonical.com>
Signed-By: Federico Quattrin <federico.quattrin at canonical.com>
https://launchpad.net/ubuntu/+source/cloud-init/25.1.4-0ubuntu0~22.04.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the jammy-changes
mailing list