[ubuntu/questing-proposed] cloud-init 25.2~4geb9c1239-0ubuntu1 (Accepted)

[Chad Smith]

cloud-init (25.2~4geb9c1239-0ubuntu1) questing; urgency=medium

  * d/cloud-init-base.postinst: move existing hotplug-cmd fifo to root-only
    share dir (CVE-2024-11584)
  * Upstream snapshot based on upstream/main at eb9c1239.
    - Bugs fixed in this snapshot: (LP: #2069607)
    - security: make hotplug socket only writable by root (CVE-2024-6174)
    - security: make ds-identify behavior strict datasource discovery on
      non-x86 platforms without DMI data (LP: #2069607) (CVE-2024-11584)

Date: Thu, 12 Jun 2025 13:24:29 -0600
Changed-By: Chad Smith <chad.smith at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/cloud-init/25.2~4geb9c1239-0ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 12 Jun 2025 13:24:29 -0600
Source: cloud-init
Built-For-Profiles: noudeb
Architecture: source
Version: 25.2~4geb9c1239-0ubuntu1
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Chad Smith <chad.smith at canonical.com>
Launchpad-Bugs-Fixed: 2069607
Changes:
 cloud-init (25.2~4geb9c1239-0ubuntu1) questing; urgency=medium
 .
   * d/cloud-init-base.postinst: move existing hotplug-cmd fifo to root-only
     share dir (CVE-2024-11584)
   * Upstream snapshot based on upstream/main at eb9c1239.
     - Bugs fixed in this snapshot: (LP: #2069607)
     - security: make hotplug socket only writable by root (CVE-2024-6174)
     - security: make ds-identify behavior strict datasource discovery on
       non-x86 platforms without DMI data (LP: #2069607) (CVE-2024-11584)
Checksums-Sha1:
 183964df287c43ec2afb5ed419bc971a94fc651e 2562 cloud-init_25.2~4geb9c1239-0ubuntu1.dsc
 6d46c064308733a132f097c07cecfb04a4bb6675 1906231 cloud-init_25.2~4geb9c1239.orig.tar.gz
 21e4c4e50b54e0c8c8c16c802c875e1da68b1b11 92108 cloud-init_25.2~4geb9c1239-0ubuntu1.debian.tar.xz
 db67392a1c765bf71d70bb0494e0ef542b7b2f24 9948 cloud-init_25.2~4geb9c1239-0ubuntu1_source.buildinfo
Checksums-Sha256:
 a9142ff03aacead55e89a711efd520af20b62871cf258084f4da3ac92ec074d3 2562 cloud-init_25.2~4geb9c1239-0ubuntu1.dsc
 e7dbb92a98ca796a9ff59c4266086556796433007d282ee3d56466e409ab6219 1906231 cloud-init_25.2~4geb9c1239.orig.tar.gz
 f2828d64013bc167dfaa8a03edfed78a0494a0eb5609f806df2fdbd188cd7ad1 92108 cloud-init_25.2~4geb9c1239-0ubuntu1.debian.tar.xz
 dbd89d0c21e11ab8b6f94e85978587ac3c50cf0e880d895c3e079629625e2f38 9948 cloud-init_25.2~4geb9c1239-0ubuntu1_source.buildinfo
Files:
 47c77fdd92a28e296ec1109b19d6eab3 2562 admin optional cloud-init_25.2~4geb9c1239-0ubuntu1.dsc
 ba6a11130b2c8fd1118f195d47ec8fc6 1906231 admin optional cloud-init_25.2~4geb9c1239.orig.tar.gz
 ff1ed69c70d6fbce4b94a1151b88151b 92108 admin optional cloud-init_25.2~4geb9c1239-0ubuntu1.debian.tar.xz
 e0e8d68b119a368e0aeedd4e1b4b2fbe 9948 admin optional cloud-init_25.2~4geb9c1239-0ubuntu1_source.buildinfo