- CVE-2024-6174: fix platform enumeration by changing default policy of ds-identify to disallow discovery of datasources without strict identifiable - CVE-2024-11584: fix systemd socket unit permission vulnerability to prevent unprivileged user from triggering hotplug-hook commands - CVE-2023-1786: fix leak of sensitive user/vendor data and enforce 640 perms on cloud-init.log - CVE-2022-2084: remove schema errors from log to avoid leaking sensitive user-data values into world-readable /var/log/cloud-init.log - rebuild with the vendor .el9_2 dist so the update outranks AlmaLinux 22.1-10.el9_2.alma