Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:0440-1

Опубликовано: 24 фев. 2020
Источник: suse-cvrf

Описание

Security update for python-azure-agent

This update for python-azure-agent fixes the following issues:

python-azure-agent was updated to version 2.2.45 (jsc#ECO-80)

  • Add support for Gen2 VM resource disks
  • Use alternate systemd detection
  • Fix /proc/net/route requirement that causes errors on FreeBSD
  • Add cloud-init auto-detect to prevent multiple provisioning mechanisms from relying on configuration for coordination
  • Disable cgroups when daemon is setup incorrectly
  • Remove upgrade extension loop for the same goal state
  • Add container id for extension telemetry events
  • Be more exact when detecting IMDS service health
  • Changing add_event to start sending missing fields

From 2.2.44 update:

  • Remove outdated extension ZIP packages
  • Improved error handling when starting extensions using systemd
  • Reduce provisioning time of some custom images
  • Improve the handling of extension download errors
  • New API for extension authors to handle errors during extension update
  • Fix handling of errors in calls to openssl
  • Improve logic to determine current distro
  • Reduce verbosity of several logging statements

From 2.2.42 update:

  • Poll for artifact blob, addresses goal state procesing issue

From 2.2.41 update:

  • Rewriting the mechanism to start the extension using systemd-run for systems using systemd for managing
  • Refactoring of resource monitoring framework using cgroup for both systemd and non-systemd approaches [#1530, #1534]
  • Telemetry pipeline for resource monitoring data

From 2.2.40 update:

  • Fixed tracking of memory/cpu usage
  • Do not prevent extensions from running if setting up cgroups fails
  • Enable systemd-aware deprovisioning on all versions >= 18.04
  • Add systemd support for Debian Jessie, Stretch, and Buster
  • Support for Linux Openwrt

From 2.2.38 update:

Security issue fixed:

  • CVE-2019-0804: An issue with swapfile handling in the agent creates a data leak situation that exposes system memory data. (bsc#1127838)
  • Add fixes for handling swap file and other nit fixes

From 2.2.37 update:

  • Improves re-try logic to handle errors while downloading extensions

Список пакетов

Container suse/sle-micro-rancher/5.2:latest
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Azure-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Azure-HPC-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-SAP-Azure-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-Azure-Basic
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-Azure-Standard
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-CAP-Deployment-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP2-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP3-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Azure-Basic
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Azure-Standard
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-HPC
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-HPC-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Server-4-3
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Server-4-3-Azure-llc
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Server-4-3-Azure-ltd
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-Hardened
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-Hardened-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAPCAL
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP4-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Azure-3P
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Azure-Basic
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Azure-Standard
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0-Azure-llc
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0-Azure-ltd
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Micro-5-5-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Micro-5-5-BYOS
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-Micro-5-5-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-Azure-3P
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-Hardened-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP5-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-Azure-Basic
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-Azure-Standard
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-CHOST-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-HPC
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-HPC-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-HPC-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-Hardened
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-Hardened-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
python-azure-agent-2.2.45-3.3.1
Image SLES15-SP6-SAPCAL-Azure
python-azure-agent-2.2.45-3.3.1
SUSE Linux Enterprise Module for Public Cloud 15 SP1
python-azure-agent-2.2.45-3.3.1

Описание

An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.


Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Azure-BYOS:python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-Azure-HPC-BYOS:python-azure-agent-2.2.45-3.3.1
Image SLES15-SP1-CHOST-BYOS-Azure:python-azure-agent-2.2.45-3.3.1

Ссылки