Описание
Security update for python-azure-agent
This update for python-azure-agent fixes the following issues:
python-azure-agent was updated to version 2.2.45 (jsc#ECO-80)
- Add support for Gen2 VM resource disks
- Use alternate systemd detection
- Fix /proc/net/route requirement that causes errors on FreeBSD
- Add cloud-init auto-detect to prevent multiple provisioning mechanisms from relying on configuration for coordination
- Disable cgroups when daemon is setup incorrectly
- Remove upgrade extension loop for the same goal state
- Add container id for extension telemetry events
- Be more exact when detecting IMDS service health
- Changing add_event to start sending missing fields
From 2.2.44 update:
- Remove outdated extension ZIP packages
- Improved error handling when starting extensions using systemd
- Reduce provisioning time of some custom images
- Improve the handling of extension download errors
- New API for extension authors to handle errors during extension update
- Fix handling of errors in calls to openssl
- Improve logic to determine current distro
- Reduce verbosity of several logging statements
From 2.2.42 update:
- Poll for artifact blob, addresses goal state procesing issue
From 2.2.41 update:
- Rewriting the mechanism to start the extension using systemd-run for systems using systemd for managing
- Refactoring of resource monitoring framework using cgroup for both systemd and non-systemd approaches [#1530, #1534]
- Telemetry pipeline for resource monitoring data
From 2.2.40 update:
- Fixed tracking of memory/cpu usage
- Do not prevent extensions from running if setting up cgroups fails
- Enable systemd-aware deprovisioning on all versions >= 18.04
- Add systemd support for Debian Jessie, Stretch, and Buster
- Support for Linux Openwrt
From 2.2.38 update:
Security issue fixed:
- CVE-2019-0804: An issue with swapfile handling in the agent creates a data leak situation that exposes system memory data. (bsc#1127838)
- Add fixes for handling swap file and other nit fixes
From 2.2.37 update:
- Improves re-try logic to handle errors while downloading extensions
Список пакетов
Container suse/sle-micro-rancher/5.2:latest
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Azure-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Azure-HPC-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-SAP-Azure-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-Azure-Basic
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-Azure-Standard
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-CAP-Deployment-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Azure-Basic
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Azure-Standard
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-HPC
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-HPC-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Server-4-3
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Server-4-3-Azure-llc
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Server-4-3-Azure-ltd
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-Hardened
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-Hardened-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAPCAL
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Azure-3P
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Azure-Basic
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Azure-Standard
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0-Azure-llc
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0-Azure-ltd
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Micro-5-5-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Micro-5-5-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Micro-5-5-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-Azure-3P
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-Hardened-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-Azure-Basic
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-Azure-Standard
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-HPC
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-Hardened
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-Hardened-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
SUSE Linux Enterprise Module for Public Cloud 15 SP1
python-azure-agent-2.2.45-3.3.1
Ссылки
- Link for SUSE-SU-2020:0440-1
- E-Mail link for SUSE-SU-2020:0440-1
- SUSE Security Ratings
- SUSE Bug 1127838
- SUSE CVE CVE-2019-0804 page
Описание
An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.
Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Azure-BYOS:python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Azure-HPC-BYOS:python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-CHOST-BYOS-Azure:python-azure-agent-2.2.45-3.3.1
Ссылки
- CVE-2019-0804
- SUSE Bug 1127838
- SUSE Bug 1152980