Amazon Linux 2023 Security Advisory: ALAS2023-2025-1082
Advisory Released Date: 2025-07-10
Advisory Updated Date: 2025-07-10
Severity:
Important
Issue Overview:
When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration. (CVE-2024-6174)
Affected Packages:
cloud-init
Issue Correction:
Run dnf update cloud-init --releasever 2023.8.20250707 to update your system.
New Packages:
noarch:
cloud-init-cfg-ec2-22.2.2-1.amzn2023.1.14.noarch
cloud-init-cfg-onprem-22.2.2-1.amzn2023.1.14.noarch
cloud-init-22.2.2-1.amzn2023.1.14.noarch
src:
cloud-init-22.2.2-1.amzn2023.1.14.src