Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1251388

Bug#1108403: cloud-init: CVE-2024-6174

From Jeremy Stanley <fungi@yuggoth.org>
Newsgroups linux.debian.bugs.dist
Subject Bug#1108403: cloud-init: CVE-2024-6174
Date 2025-06-29 15:00 +0200
Message-ID <L2ZNv-e0lY-5@gated-at.bofh.it> (permalink)
References (6 earlier) <L2DjX-dM27-9@gated-at.bofh.it> <L2mM9-dBPa-1@gated-at.bofh.it> <L2GBb-dOcl-5@gated-at.bofh.it> <L2mM9-dBPa-1@gated-at.bofh.it> <L2GBb-dOcl-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On 2025-06-28 18:15:08 +0200 (+0200), thomas@goirand.fr wrote:
[...]
> FYI, I expect most OpenStack operators to configure a config drive 
> by default, as it is the most reliable metadata source.

Yes, the main reason some of them prefer/recommend the network 
metadata source is that it can be updated over time, while the 
configdrive content is (currently) frozen at the time its associated 
server instance is created so things like default gateways, static 
routes and DNS resolver addresses may grow stale as the operator 
makes adjustments to their environment.

But since we're talking about a very small subset of clouds right 
now (specifically those with non-amd64 compute nodes), I think the 
behavior change is probably not a major concern.
-- 
Jeremy Stanley

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1108403: cloud-init: CVE-2024-6174 Salvatore Bonaccorso <carnil@debian.org> - 2025-06-27 21:20 +0200
  Bug#1108403: (no subject) Noah Meyerhans <noahm@debian.org> - 2025-06-27 21:40 +0200
    Bug#1108403: (no subject) Jeremy Stanley <fungi@yuggoth.org> - 2025-06-28 02:40 +0200
      Bug#1108403: (no subject) Bastian Blank <waldi@debian.org> - 2025-06-28 10:00 +0200
        Bug#1108403: (no subject) Jeremy Stanley <fungi@yuggoth.org> - 2025-06-28 15:00 +0200
          Bug#1108403: (no subject) thomas@goirand.fr - 2025-06-28 18:30 +0200
            Bug#1108403: cloud-init: CVE-2024-6174 Jeremy Stanley <fungi@yuggoth.org> - 2025-06-29 15:00 +0200
              Bug#1108403: cloud-init: CVE-2024-6174 Bastian Blank <waldi@debian.org> - 2025-06-29 17:40 +0200
                Bug#1108403: cloud-init: CVE-2024-6174 thomas@goirand.fr - 2025-06-29 18:00 +0200
                Bug#1108403: cloud-init: CVE-2024-6174 Bastian Blank <waldi@debian.org> - 2025-06-29 18:40 +0200
  Bug#1108403: cloud-init: CVE-2024-6174 Jeremy Stanley <fungi@yuggoth.org> - 2025-06-30 16:10 +0200
    Bug#1108403: cloud-init: CVE-2024-6174 Jeremy Stanley <fungi@yuggoth.org> - 2025-07-07 20:10 +0200
      Bug#1108403: cloud-init: CVE-2024-6174 Noah Meyerhans <noahm@debian.org> - 2025-07-07 21:00 +0200

csiph-web