ALEA-2021:5239 cloud-init bug fix and enhancement update
Cloud-init fails to start or configure routes correctly after updates, potentially causing service disruption for cloud instances.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- Available
What is ALEA-2021:5239?
ALEA-2021:5239 is a vulnerability in cloud-init, published on 21 Dec 2021.
Official description
The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.
Bug Fix(es) and Enhancement(s):
cloud-init.service fails to start after package update (BZ#2028738)
[AlmaLinux-8] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP (BZ#2028756)
Which versions are affected by ALEA-2021:5239?
Linux distribution packages (1)
cloud-init AlmaLinux:8 | All versions | 21.1-7.el8_5.3.alma |
How do I fix ALEA-2021:5239?
Apply the vendor's patch.
Is ALEA-2021:5239 being exploited?
There is no known exploitation of ALEA-2021:5239 in the wild and no public exploit code.