StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · cloud-init

`cloud-init` CVE matrix across Linux distros

37 CVEs tracked across 8 distro releases. Showing the 37 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2012-6639→ fixed in0.7.1-1
CVE-2019-0816→ fixed in18.3-6
CVE-2020-8631→ fixed in19.4-2
CVE-2020-8632→ fixed in19.4-2
CVE-2021-3429→ fixed in20.4.1-2

Single command to patch all of these:

sudo apt-get install --only-upgrade -y cloud-init

Debian bookworm

Source: Debian

CVE-2012-6639→ fixed in0.7.1-1
CVE-2019-0816→ fixed in18.3-6
CVE-2020-8631→ fixed in19.4-2
CVE-2020-8632→ fixed in19.4-2
CVE-2021-3429→ fixed in20.4.1-2
CVE-2022-2084→ fixed in22.2-2
CVE-2024-11584→ fixed in22.4.2-1+deb12u3
CVE-2024-6174→ fixed in22.4.2-1+deb12u3

Single command to patch all of these:

sudo apt-get install --only-upgrade -y cloud-init

Debian trixie

Source: Debian

CVE-2012-6639→ fixed in0.7.1-1
CVE-2019-0816→ fixed in18.3-6
CVE-2020-8631→ fixed in19.4-2
CVE-2020-8632→ fixed in19.4-2
CVE-2021-3429→ fixed in20.4.1-2
CVE-2022-2084→ fixed in22.2-2
CVE-2023-1786→ fixed in23.2-1
CVE-2024-11584→ fixed in25.1.4-1
+1 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y cloud-init

Alpine v3.20

Source: Alpine secdb

CVE-2021-3429→ fixed in21.1-r1
CVE-2022-2084→ fixed in22.2.2-r0
CVE-2023-1786→ fixed in23.1.2-r0

Single command to patch all of these:

apk add --upgrade cloud-init

Alpine v3.21

Source: Alpine secdb

CVE-2021-3429→ fixed in21.1-r1
CVE-2022-2084→ fixed in22.2.2-r0
CVE-2023-1786→ fixed in23.1.2-r0

Single command to patch all of these:

apk add --upgrade cloud-init

Alpine edge

Source: Alpine secdb

CVE-2021-3429→ fixed in21.1-r1
CVE-2022-2084→ fixed in22.2.2-r0
CVE-2023-1786→ fixed in23.1.2-r0

Single command to patch all of these:

apk add --upgrade cloud-init

Alpine v3.18

Source: Alpine secdb

CVE-2021-3429→ fixed in21.1-r1
CVE-2022-2084→ fixed in22.2.2-r0
CVE-2023-1786→ fixed in23.1.2-r0

Single command to patch all of these:

apk add --upgrade cloud-init

Alpine v3.19

Source: Alpine secdb

CVE-2021-3429→ fixed in21.1-r1
CVE-2022-2084→ fixed in22.2.2-r0
CVE-2023-1786→ fixed in23.1.2-r0

Single command to patch all of these:

apk add --upgrade cloud-init

Is YOUR cloud-init patched?

5-second check on your actual server. The quickscan reads your installed cloud-init version and matches against the same 37-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)