[El-errata] ELSA-2025-10848 Important: Oracle Linux 9 cloud-init security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2025-10848

http://linux.oracle.com/errata/ELSA-2025-10848.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
cloud-init-24.4-4.0.1.el9_6.3.noarch.rpm

aarch64:
cloud-init-24.4-4.0.1.el9_6.3.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/cloud-init-24.4-4.0.1.el9_6.3.src.rpm

Related CVEs:

CVE-2024-6174




Description of changes:

[24.4-4.0.1.el9_6.3]
- Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168]
- Fix log file permission [Orabug: 35302969]
- Update detection logic for OL distros in config template [Orabug: 34845400]
- Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
- Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
- Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
- limit permissions [Orabug: 31352433]
- Changes to ignore all enslaved interfaces [Orabug: 30092148]
- Make Oracle datasource detect dracut based config files [Orabug: 29956753]
- add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
  1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
  2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
  Resolves: Oracle-Bug:41660 (Bugzilla)
- added OL to list of known distros
Resolves: rhbz#1427280
Resolves: rhbz#1427280

[24.4-4.el9_6.3]
- ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100611]
- ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100611]
- Resolves: RHEL-100611
  (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.6.z])

[24.4-4.el9_6.2]
- Adding missed fix 'Retain exit code in cloud-init status for recoverable errors'
- Resolves: RHEL-101693