Bug#1139643: bookworm-pu: package cloud-init/22.4.2-1+deb12u4
Package: release.debian.org
Severity: normal
Tags: bookworm
X-Debbugs-Cc: cloud-init@packages.debian.org
Control: affects -1 + src:cloud-init
User: release.debian.org@packages.debian.org
Usertags: pu
The cloud team would like to update cloud-init in bookworm.
This update contains a single change, cherry-picked from upstream. The
upstream fix is already included in trixie and newer releases.
The issue is that, in environments where cloud-init is used to generate
networking configuration for the host and is configured to bond multiple
interfaces together, it fails to do so correctly and instead effectively
creates a bond with a single physical interface in it.
Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138064
Upstream change: https://github.com/canonical/cloud-init/commit/12f1198e8
The update has been confirmed by the bug submitter to resolve the issue.
Full debdiff is attached.
Thanks
noah
diff -Nru cloud-init-22.4.2/debian/changelog cloud-init-22.4.2/debian/changelog
--- cloud-init-22.4.2/debian/changelog 2025-07-10 15:07:51.000000000 -0400
+++ cloud-init-22.4.2/debian/changelog 2026-06-01 15:13:20.000000000 -0400
@@ -1,3 +1,10 @@
+cloud-init (22.4.2-1+deb12u4) bookworm; urgency=medium
+
+ * Import upstream fix for OpenStack bonds come up with only one member
+ (Closes: #1138064)
+
+ -- Noah Meyerhans <noahm@debian.org> Mon, 01 Jun 2026 15:13:20 -0400
+
cloud-init (22.4.2-1+deb12u3) bookworm; urgency=medium
* Import upstream fix for CVE-2024-6174 (Closes: #1108403)
diff -Nru cloud-init-22.4.2/debian/patches/fix_openstack_Fix_bond_mac_address_5369.patch cloud-init-22.4.2/debian/patches/fix_openstack_Fix_bond_mac_address_5369.patch
--- cloud-init-22.4.2/debian/patches/fix_openstack_Fix_bond_mac_address_5369.patch 1969-12-31 19:00:00.000000000 -0500
+++ cloud-init-22.4.2/debian/patches/fix_openstack_Fix_bond_mac_address_5369.patch 2026-06-01 15:13:20.000000000 -0400
@@ -0,0 +1,24 @@
+From 12f1198e8e9e884363b14eeaaf6eb69b7199c36a Mon Sep 17 00:00:00 2001
+From: Curt Moore <curt.moore@garmin.com>
+Date: Tue, 4 Jun 2024 14:37:43 -0500
+Subject: [PATCH] fix(openstack): Fix bond mac_address (#5369)
+
+Fixes GH-5368
+---
+ cloudinit/sources/helpers/openstack.py | 2 +-
+ tools/.github-cla-signers | 1 +
+ 2 files changed, 2 insertions(+), 1 deletion(-)
+
+Index: cloud-init/cloudinit/sources/helpers/openstack.py
+===================================================================
+--- cloud-init.orig/cloudinit/sources/helpers/openstack.py
++++ cloud-init/cloudinit/sources/helpers/openstack.py
+@@ -655,7 +655,7 @@ def convert_net_json(network_json=None,
+ if link["type"] in ["bond"]:
+ params = {}
+ if link_mac_addr:
+- params["mac_address"] = link_mac_addr
++ cfg.update({"mac_address": link_mac_addr})
+ for k, v in link.items():
+ if k == "bond_links":
+ continue
diff -Nru cloud-init-22.4.2/debian/patches/series cloud-init-22.4.2/debian/patches/series
--- cloud-init-22.4.2/debian/patches/series 2025-07-10 15:07:51.000000000 -0400
+++ cloud-init-22.4.2/debian/patches/series 2026-06-01 15:13:20.000000000 -0400
@@ -6,3 +6,4 @@
networkd_Add_support_for_multiple_Route_sections.patch
CVE-2024-6174.patch
CVE-2024-11584.patch
+fix_openstack_Fix_bond_mac_address_5369.patch
Reply to: