Oval Definition:oval:org.opensuse.security:def:51785
Revision Date:2020-12-01Version:1
Title:Security update for python-azure-agent (Moderate)
Description:

This update for python-azure-agent fixes the following issues:

Update to version 2.2.45 (jsc#ECO-80 bsc#1159639)

+ Add support for Gen2 VM resource disks + Use alternate systemd detection + Fix /proc/net/route requirement that causes errors on FreeBSD + Add cloud-init auto-detect to prevent multiple provisioning mechanisms from relying on configuration for coordination + Disable cgroups when daemon is setup incorrectly + Remove upgrade extension loop for the same goal state + Add container id for extension telemetry events + Be more exact when detecting IMDS service health + Changing add_event to start sending missing fields

Update to version 2.2.44:

+ Remove outdated extension ZIP packages + Improved error handling when starting extensions using systemd + Reduce provisioning time of some custom images + Improve the handling of extension download errors + New API for extension authors to handle errors during extension update + Fix handling of errors in calls to openssl + Improve logic to determine current distro + Reduce verbosity of several logging statements

Update to version 2.2.42:

+ Poll for artifact blob, addresses goal state procesing issue

Update to version 2.2.41:

+ Rewriting the mechanism to start the extension using systemd-run for systems using systemd for managing + Refactoring of resource monitoring framework using cgroup for both systemd and non-systemd approaches [#1530, #1534] + Telemetry pipeline for resource monitoring data

Update to version 2.2.40:

+ Fixed tracking of memory/cpu usage + Do not prevent extensions from running if setting up cgroups fails + Enable systemd-aware deprovisioning on all versions >= 18.04 + Add systemd support for Debian Jessie, Stretch, and Buster + Support for Linux Openwrt

Update to version 2.2.38:

+ CVE-2019-0804: WALinuxAgent could be made to expose sensitive information. (bsc#1127838) + Add fixes for handling swap file and other nit fixes

Update to version 2.2.37:

+ Improves re-try logic to handle errors while downloading extensions
Family:unixClass:patch
Status:Reference(s):1118832
1119396
1119850
1123022
1124356
1126711
1126713
1126821
1126823
1126827
1127122
1127838
1128722
1128883
1128886
1128887
1128889
1128892
1129032
1131595
1132837
1132838
1134322
1158194
1159639
1160611
1160612
1160613
1160614
1160615
1168669
1171550
1172021
1173032
CVE-2009-0159
CVE-2009-1252
CVE-2011-3848
CVE-2011-3872
CVE-2012-3864
CVE-2012-3865
CVE-2012-3866
CVE-2012-3867
CVE-2013-1992
CVE-2013-3567
CVE-2013-4509
CVE-2013-4761
CVE-2013-4956
CVE-2013-5211
CVE-2014-1545
CVE-2014-3248
CVE-2014-3253
CVE-2014-3564
CVE-2014-3618
CVE-2014-9293
CVE-2014-9294
CVE-2014-9295
CVE-2014-9296
CVE-2014-9297
CVE-2014-9298
CVE-2015-1798
CVE-2015-1799
CVE-2015-3405
CVE-2015-5300
CVE-2015-7691
CVE-2015-7692
CVE-2015-7701
CVE-2015-7702
CVE-2015-7703
CVE-2015-7704
CVE-2015-7705
CVE-2015-7848
CVE-2015-7849
CVE-2015-7850
CVE-2015-7851
CVE-2015-7852
CVE-2015-7853
CVE-2015-7854
CVE-2015-7855
CVE-2015-7871
CVE-2015-7973
CVE-2015-7974
CVE-2015-7975
CVE-2015-7976
CVE-2015-7977
CVE-2015-7978
CVE-2015-7979
CVE-2015-8138
CVE-2015-8139
CVE-2015-8140
CVE-2015-8158
CVE-2016-1547
CVE-2016-1548
CVE-2016-1549
CVE-2016-1550
CVE-2016-1551
CVE-2016-2516
CVE-2016-2517
CVE-2016-2518
CVE-2016-2519
CVE-2016-4953
CVE-2016-4954
CVE-2016-4955
CVE-2016-4956
CVE-2016-4957
CVE-2018-19935
CVE-2018-20783
CVE-2019-0804
CVE-2019-11034
CVE-2019-11035
CVE-2019-11036
CVE-2019-19451
CVE-2019-19956
CVE-2019-2126
CVE-2019-3814
CVE-2019-3886
CVE-2019-9020
CVE-2019-9021
CVE-2019-9022
CVE-2019-9023
CVE-2019-9024
CVE-2019-9232
CVE-2019-9325
CVE-2019-9371
CVE-2019-9433
CVE-2019-9637
CVE-2019-9638
CVE-2019-9639
CVE-2019-9640
CVE-2019-9641
CVE-2019-9675
CVE-2020-12402
CVE-2020-13249
CVE-2020-2752
CVE-2020-2760
CVE-2020-2812
CVE-2020-2814
SUSE-SU-2019:0414-1
SUSE-SU-2019:1285-1
SUSE-SU-2019:1461-1
SUSE-SU-2019:3391-1
SUSE-SU-2019:3393-1
SUSE-SU-2020:0143-1
SUSE-SU-2020:1532-1
SUSE-SU-2020:1711-1
SUSE-SU-2020:1850-1
Platform(s):openSUSE Leap 15.0
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Python2 packages 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Workstation Extension 15
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • bind-9.11.2-lp150.7 is installed
  • OR bind-chrootenv-9.11.2-lp150.7 is installed
  • OR bind-utils-9.11.2-lp150.7 is installed
  • OR libbind9-160-9.11.2-lp150.7 is installed
  • OR libdns169-9.11.2-lp150.7 is installed
  • OR libirs160-9.11.2-lp150.7 is installed
  • OR libisc166-9.11.2-lp150.7 is installed
  • OR libisccc160-9.11.2-lp150.7 is installed
  • OR libisccfg160-9.11.2-lp150.7 is installed
  • OR liblwres160-9.11.2-lp150.7 is installed
  • OR python3-bind-9.11.2-lp150.7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • file-4.24-43.27 is installed
  • OR file-32bit-4.24-43.27 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • libldb1-3.6.3-67 is installed
  • OR libldb1-32bit-3.6.3-67 is installed
  • OR libsmbclient0-3.6.3-67 is installed
  • OR libsmbclient0-32bit-3.6.3-67 is installed
  • OR libtalloc2-3.6.3-67 is installed
  • OR libtalloc2-32bit-3.6.3-67 is installed
  • OR libtdb1-3.6.3-67 is installed
  • OR libtdb1-32bit-3.6.3-67 is installed
  • OR libtevent0-3.6.3-67 is installed
  • OR libtevent0-32bit-3.6.3-67 is installed
  • OR libwbclient0-3.6.3-67 is installed
  • OR libwbclient0-32bit-3.6.3-67 is installed
  • OR samba-3.6.3-67 is installed
  • OR samba-32bit-3.6.3-67 is installed
  • OR samba-client-3.6.3-67 is installed
  • OR samba-client-32bit-3.6.3-67 is installed
  • OR samba-doc-3.6.3-67 is installed
  • OR samba-krb-printing-3.6.3-67 is installed
  • OR samba-winbind-3.6.3-67 is installed
  • OR samba-winbind-32bit-3.6.3-67 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • gpgme-1.5.1-1 is installed
  • OR libgpgme11-1.5.1-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • ibus-chewing-1.4.14-4 is installed
  • OR ibus-pinyin-1.5.0-7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND iputils-s20121221-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND facter-2.4.6-12.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
  • AND Package Information
  • python-azure-agent-2.2.45-7.9 is installed
  • OR python-azure-agent-test-2.2.45-7.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed
  • AND Package Information
  • python-libxml2-python-2.9.7-3.22 is installed
  • OR python2-libxml2-python-2.9.7-3.22 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • libvirt-4.0.0-9.19 is installed
  • OR libvirt-admin-4.0.0-9.19 is installed
  • OR libvirt-client-4.0.0-9.19 is installed
  • OR libvirt-daemon-4.0.0-9.19 is installed
  • OR libvirt-daemon-config-network-4.0.0-9.19 is installed
  • OR libvirt-daemon-config-nwfilter-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-interface-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-libxl-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-lxc-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-network-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-nodedev-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-nwfilter-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-qemu-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-secret-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-storage-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-storage-core-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-storage-disk-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-storage-iscsi-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-storage-logical-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-storage-mpath-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-storage-rbd-4.0.0-9.19 is installed
  • OR libvirt-daemon-driver-storage-scsi-4.0.0-9.19 is installed
  • OR libvirt-daemon-hooks-4.0.0-9.19 is installed
  • OR libvirt-daemon-lxc-4.0.0-9.19 is installed
  • OR libvirt-daemon-qemu-4.0.0-9.19 is installed
  • OR libvirt-daemon-xen-4.0.0-9.19 is installed
  • OR libvirt-devel-4.0.0-9.19 is installed
  • OR libvirt-doc-4.0.0-9.19 is installed
  • OR libvirt-lock-sanlock-4.0.0-9.19 is installed
  • OR libvirt-nss-4.0.0-9.19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • libmysqld-devel-10.2.32-3.29 is installed
  • OR libmysqld19-10.2.32-3.29 is installed
  • OR mariadb-10.2.32-3.29 is installed
  • OR mariadb-client-10.2.32-3.29 is installed
  • OR mariadb-errormessages-10.2.32-3.29 is installed
  • OR mariadb-tools-10.2.32-3.29 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.32 is installed
  • OR php7-7.2.5-4.32 is installed
  • OR php7-bcmath-7.2.5-4.32 is installed
  • OR php7-bz2-7.2.5-4.32 is installed
  • OR php7-calendar-7.2.5-4.32 is installed
  • OR php7-ctype-7.2.5-4.32 is installed
  • OR php7-curl-7.2.5-4.32 is installed
  • OR php7-dba-7.2.5-4.32 is installed
  • OR php7-devel-7.2.5-4.32 is installed
  • OR php7-dom-7.2.5-4.32 is installed
  • OR php7-enchant-7.2.5-4.32 is installed
  • OR php7-exif-7.2.5-4.32 is installed
  • OR php7-fastcgi-7.2.5-4.32 is installed
  • OR php7-fileinfo-7.2.5-4.32 is installed
  • OR php7-fpm-7.2.5-4.32 is installed
  • OR php7-ftp-7.2.5-4.32 is installed
  • OR php7-gd-7.2.5-4.32 is installed
  • OR php7-gettext-7.2.5-4.32 is installed
  • OR php7-gmp-7.2.5-4.32 is installed
  • OR php7-iconv-7.2.5-4.32 is installed
  • OR php7-intl-7.2.5-4.32 is installed
  • OR php7-json-7.2.5-4.32 is installed
  • OR php7-ldap-7.2.5-4.32 is installed
  • OR php7-mbstring-7.2.5-4.32 is installed
  • OR php7-mysql-7.2.5-4.32 is installed
  • OR php7-odbc-7.2.5-4.32 is installed
  • OR php7-opcache-7.2.5-4.32 is installed
  • OR php7-openssl-7.2.5-4.32 is installed
  • OR php7-pcntl-7.2.5-4.32 is installed
  • OR php7-pdo-7.2.5-4.32 is installed
  • OR php7-pear-7.2.5-4.32 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.32 is installed
  • OR php7-pgsql-7.2.5-4.32 is installed
  • OR php7-phar-7.2.5-4.32 is installed
  • OR php7-posix-7.2.5-4.32 is installed
  • OR php7-shmop-7.2.5-4.32 is installed
  • OR php7-snmp-7.2.5-4.32 is installed
  • OR php7-soap-7.2.5-4.32 is installed
  • OR php7-sockets-7.2.5-4.32 is installed
  • OR php7-sodium-7.2.5-4.32 is installed
  • OR php7-sqlite-7.2.5-4.32 is installed
  • OR php7-sysvmsg-7.2.5-4.32 is installed
  • OR php7-sysvsem-7.2.5-4.32 is installed
  • OR php7-sysvshm-7.2.5-4.32 is installed
  • OR php7-tokenizer-7.2.5-4.32 is installed
  • OR php7-wddx-7.2.5-4.32 is installed
  • OR php7-xmlreader-7.2.5-4.32 is installed
  • OR php7-xmlrpc-7.2.5-4.32 is installed
  • OR php7-xmlwriter-7.2.5-4.32 is installed
  • OR php7-xsl-7.2.5-4.32 is installed
  • OR php7-zip-7.2.5-4.32 is installed
  • OR php7-zlib-7.2.5-4.32 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • libQt5Core5-5.3.2-1 is installed
  • OR libQt5DBus5-5.3.2-1 is installed
  • OR libQt5Gui5-5.3.2-1 is installed
  • OR libQt5Widgets5-5.3.2-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • libsnmp30-5.7.3-6.3 is installed
  • OR libsnmp30-32bit-5.7.3-6.3 is installed
  • OR net-snmp-5.7.3-6.3 is installed
  • OR perl-SNMP-5.7.3-6.3 is installed
  • OR snmp-mibs-5.7.3-6.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • libthai-data-0.1.25-4 is installed
  • OR libthai0-0.1.25-4 is installed
  • OR libthai0-32bit-0.1.25-4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • kernel-default-4.4.121-92.85 is installed
  • OR kernel-default-base-4.4.121-92.85 is installed
  • OR kernel-default-devel-4.4.121-92.85 is installed
  • OR kernel-devel-4.4.121-92.85 is installed
  • OR kernel-macros-4.4.121-92.85 is installed
  • OR kernel-source-4.4.121-92.85 is installed
  • OR kernel-syms-4.4.121-92.85 is installed
  • OR kgraft-patch-4_4_121-92_85-default-1-3.5 is installed
  • OR kgraft-patch-SLE12-SP2_Update_23-1-3.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • xen-4.7.6_02-43.36 is installed
  • OR xen-doc-html-4.7.6_02-43.36 is installed
  • OR xen-libs-4.7.6_02-43.36 is installed
  • OR xen-libs-32bit-4.7.6_02-43.36 is installed
  • OR xen-tools-4.7.6_02-43.36 is installed
  • OR xen-tools-domU-4.7.6_02-43.36 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_103-92_53-default-8-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_16-8-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND apache2-mod_jk-1.2.40-5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • libssh2-1-1.4.3-20.14 is installed
  • OR libssh2-1-32bit-1.4.3-20.14 is installed
  • OR libssh2_org-1.4.3-20.14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • xen-4.9.4_04-3.56 is installed
  • OR xen-doc-html-4.9.4_04-3.56 is installed
  • OR xen-libs-4.9.4_04-3.56 is installed
  • OR xen-libs-32bit-4.9.4_04-3.56 is installed
  • OR xen-tools-4.9.4_04-3.56 is installed
  • OR xen-tools-domU-4.9.4_04-3.56 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libpython3_4m1_0-3.4.6-25.16 is installed
  • OR python3-3.4.6-25.16 is installed
  • OR python3-base-3.4.6-25.16 is installed
  • OR python3-curses-3.4.6-25.16 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • augeas-1.2.0-17.3 is installed
  • OR augeas-lenses-1.2.0-17.3 is installed
  • OR libaugeas0-1.2.0-17.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • libfreebl3-3.53.1-3.45 is installed
  • OR libfreebl3-32bit-3.53.1-3.45 is installed
  • OR libfreebl3-hmac-3.53.1-3.45 is installed
  • OR libfreebl3-hmac-32bit-3.53.1-3.45 is installed
  • OR libsoftokn3-3.53.1-3.45 is installed
  • OR libsoftokn3-32bit-3.53.1-3.45 is installed
  • OR libsoftokn3-hmac-3.53.1-3.45 is installed
  • OR libsoftokn3-hmac-32bit-3.53.1-3.45 is installed
  • OR mozilla-nss-3.53.1-3.45 is installed
  • OR mozilla-nss-32bit-3.53.1-3.45 is installed
  • OR mozilla-nss-certs-3.53.1-3.45 is installed
  • OR mozilla-nss-certs-32bit-3.53.1-3.45 is installed
  • OR mozilla-nss-devel-3.53.1-3.45 is installed
  • OR mozilla-nss-sysinit-3.53.1-3.45 is installed
  • OR mozilla-nss-tools-3.53.1-3.45 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • dia-0.97.3-4.3 is installed
  • OR dia-lang-0.97.3-4.3 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND ruby2.1-rubygem-sprockets-2_11-2.11.3-1 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • postgresql96-9.6.10-3.22 is installed
  • OR postgresql96-contrib-9.6.10-3.22 is installed
  • OR postgresql96-docs-9.6.10-3.22 is installed
  • OR postgresql96-libs-9.6.10-3.22 is installed
  • OR postgresql96-server-9.6.10-3.22 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND ansible-2.4.6.0-3.3 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND nodejs6-6.14.3-11.15 is installed
  • BACK