SUSE-SU-2026:1980-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:1980-1

HIGH8.8

Security update for cloud-init

Published May 18, 2026

Modified 2 weeks ago

Fix available

Details

Description of the patch:

This update for cloud-init fixes the following issues:

Update to version 25.1.3 (bsc#1245403, CVE-2024-11584, CVE-2024-6174)
Update to version 25.1.1 (bsc#1239715, jsc#PED-8680, bsc#1228414, bsc#1237764)
Make sure a directory exists, if not create it, before writing in that location (bsc#1236720)
rsyslog warning, '~' is deprecated (bsc#1170154)
Support python 3.13 (bsc#1233649)
Move fdupes call back to %install (bsc#1214169)
Re-ship python dependencies, those have no source changes.

Affected Packages

python311-configobj

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Python 3 15 SP7

Fixed in:

5.0.8-150400.12.5.1

python311-jsonpatch

Fixed in:

1.32-150400.10.5.1

python311-jsonpointer

Fixed in:

2.3-150400.11.5.1

python311-pyserial

Fixed in:

3.5-150400.12.5.1

cloud-init

SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP5SUSE Linux Enterprise Module for Public Cloud 15 SP6SUSE Linux Enterprise Module for Public Cloud 15 SP7openSUSE Leap 15.6

Fixed in:

25.1.3-150400.15.7.6

cloud-init-config-suse

Fixed in:

25.1.3-150400.15.7.6

python311-passlib

SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP5

Fixed in:

1.7.4-150400.6.5.2

cloud-init-doc

openSUSE Leap 15.6

Fixed in: