{"id":"CVE-2019-0804","aliases":["DEBIAN-CVE-2019-0804","DLA-1709-1","DSA-4406-1","EUVD-2019-1560","GHSA-wccr-wh3m-8q5c","RHSA-2019:1527","SUSE-SU-2019:0603-1","SUSE-SU-2019:3393-1","SUSE-SU-2019:3394-1","SUSE-SU-2020:0440-1","SUSE-SU-2020:14454-1","UBUNTU-CVE-2019-0804","USN-3907-1","openSUSE-SU-2019:1106-1","openSUSE-SU-2020:0261-1","openSUSE-SU-2024:11217-1"],"status":"published","title":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files...","description":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05191,"percentile":0.92523,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732"],"published":"2019-03-12T00:00:00Z","modified":"2026-10-24T10:30:53Z","fixes":[{"ecosystem":"Debian:12","package":"waagent","fixed_in":["2.2.34-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"waagent","fixed_in":["2.2.34-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"waagent","fixed_in":["2.2.34-3"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"waagent","fixed_in":["2.2.18-3~deb8u2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"waagent","fixed_in":["2.2.18-3~deb9u2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"WALinuxAgent","fixed_in":["0:2.2.32-1.el8_0.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15","package":"python-azure-agent","fixed_in":["2.2.36-7.6.1","2.2.45-7.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-azure-agent","fixed_in":["2.2.45-34.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-azure-agent","fixed_in":["2.2.45-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11-PUBCLOUD","package":"python-azure-agent","fixed_in":["2.2.45-28.8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"walinuxagent","fixed_in":["2.2.32-0ubuntu1~14.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"walinuxagent","fixed_in":["2.2.32-0ubuntu1~16.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"walinuxagent","fixed_in":["2.2.32-0ubuntu1~18.04.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"python-azure-agent","fixed_in":["2.2.36-lp150.5.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"python-azure-agent","fixed_in":["2.2.45-lp151.2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"waagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"waagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"waagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-3"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"waagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.18-3~deb8u2"}]}],"versions":["1.2-1","1.3.2-1","2.0.8-0.1","2.1.0-1","2.1.0-2","2.1.0-3","2.1.2-1","2.1.3-1","2.1.3-2","2.1.3-3","2.1.4-1","2.1.4-2","2.1.6-1","2.2.0-1","2.2.12-1","2.2.12-2","2.2.12-3","2.2.14-1","2.2.14-1~deb9u1","2.2.14-1~deb9u1~bpo8+1","2.2.18-1","2.2.18-2","2.2.18-3~deb8u1","2.2.2-1","2.2.2-1~bpo8+1","2.2.2-2","2.2.2-2~bpo8+1"]},{"source":"osv","ecosystem":"Debian:9","package":"waagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.18-3~deb9u2"}]}],"versions":["2.2.12-1","2.2.12-2","2.2.12-3","2.2.14-1","2.2.14-1~deb9u1","2.2.14-1~deb9u1~bpo8+1","2.2.18-1","2.2.18-2","2.2.18-3~deb8u1","2.2.18-3~deb8u2","2.2.18-3~deb9u1","2.2.2-2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"WALinuxAgent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.32-1.el8_0.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15","package":"python-azure-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.36-7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15","package":"python-azure-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.45-7.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-azure-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.45-34.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-azure-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.45-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-PUBCLOUD","package":"python-azure-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.45-28.8.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"walinuxagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.32-0ubuntu1~14.04.2"}]}],"versions":["1.3.2-0ubuntu5","1.3.2-0ubuntu7","1.3.2-0ubuntu8","2.0.3-0ubuntu1","2.0.3-0ubuntu2","2.0.4-0ubuntu1","2.0.4-0ubuntu2","2.0.5-0ubuntu2~14.04.0","2.0.8-0ubuntu1~14.04.0","2.0.8-0ubuntu3~14.04.0","2.0.8-0ubuntu3~14.04.1","2.0.12-0ubuntu2~14.04.0","2.0.13-0ubuntu2~14.04.0","2.0.14-0ubuntu1~14.04.1","2.0.16-0ubuntu2","2.1.5-0ubuntu4~14.04.0","2.2.2-0ubuntu0~14.04.1","2.2.6-0ubuntu1~14.04.1","2.2.9-0ubuntu1~14.04.1","2.2.12-0ubuntu1~14.04.1","2.2.14-0ubuntu1~14.04.1","2.2.16-0ubuntu1~14.04.1","2.2.17-0ubuntu1~14.04.1","2.2.21+really2.2.20-0ubuntu1~14.04.1","2.2.32-0ubuntu1~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"walinuxagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.32-0ubuntu1~16.04.2"}]}],"versions":["2.1.1-0ubuntu3","2.1.1-0ubuntu5","2.1.2-0ubuntu1","2.1.2-0ubuntu2","2.1.3-0ubuntu1","2.1.3-0ubuntu2","2.1.3-0ubuntu3","2.1.3-0ubuntu4","2.1.3-0ubuntu4.1","2.1.3-0ubuntu4.2","2.1.5-0ubuntu4~16.04.0","2.2.2-0ubuntu0~16.04.1","2.2.6-0ubuntu1~16.04.1","2.2.9-0ubuntu1~16.04.1","2.2.12-0ubuntu1~16.04.1","2.2.14-0ubuntu1~16.04.1","2.2.16-0ubuntu1~16.04.1","2.2.17-0ubuntu1~16.04.1","2.2.21+really2.2.20-0ubuntu1~16.04.1","2.2.32-0ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"walinuxagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.32-0ubuntu1~18.04.2"}]}],"versions":["2.2.17-0ubuntu1","2.2.21-0ubuntu1","2.2.21+really2.2.20-0ubuntu1","2.2.21+really2.2.20-0ubuntu2","2.2.21+really2.2.20-0ubuntu3","2.2.32-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"walinuxagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.32-0ubuntu1~14.04.2"}]}],"versions":["1.3.2-0ubuntu5","1.3.2-0ubuntu7","1.3.2-0ubuntu8","2.0.3-0ubuntu1","2.0.3-0ubuntu2","2.0.4-0ubuntu1","2.0.4-0ubuntu2","2.0.5-0ubuntu2~14.04.0","2.0.8-0ubuntu1~14.04.0","2.0.8-0ubuntu3~14.04.0","2.0.8-0ubuntu3~14.04.1","2.0.12-0ubuntu2~14.04.0","2.0.13-0ubuntu2~14.04.0","2.0.14-0ubuntu1~14.04.1","2.0.16-0ubuntu2","2.1.5-0ubuntu4~14.04.0","2.2.2-0ubuntu0~14.04.1","2.2.6-0ubuntu1~14.04.1","2.2.9-0ubuntu1~14.04.1","2.2.12-0ubuntu1~14.04.1","2.2.14-0ubuntu1~14.04.1","2.2.16-0ubuntu1~14.04.1","2.2.17-0ubuntu1~14.04.1","2.2.21+really2.2.20-0ubuntu1~14.04.1","2.2.32-0ubuntu1~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"walinuxagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.32-0ubuntu1~16.04.2"}]}],"versions":["2.1.1-0ubuntu3","2.1.1-0ubuntu5","2.1.2-0ubuntu1","2.1.2-0ubuntu2","2.1.3-0ubuntu1","2.1.3-0ubuntu2","2.1.3-0ubuntu3","2.1.3-0ubuntu4","2.1.3-0ubuntu4.1","2.1.3-0ubuntu4.2","2.1.5-0ubuntu4~16.04.0","2.2.2-0ubuntu0~16.04.1","2.2.6-0ubuntu1~16.04.1","2.2.9-0ubuntu1~16.04.1","2.2.12-0ubuntu1~16.04.1","2.2.14-0ubuntu1~16.04.1","2.2.16-0ubuntu1~16.04.1","2.2.17-0ubuntu1~16.04.1","2.2.21+really2.2.20-0ubuntu1~16.04.1","2.2.32-0ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"walinuxagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.32-0ubuntu1~18.04.2"}]}],"versions":["2.2.17-0ubuntu1","2.2.21-0ubuntu1","2.2.21+really2.2.20-0ubuntu1","2.2.21+really2.2.20-0ubuntu2","2.2.21+really2.2.20-0ubuntu3","2.2.32-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"python-azure-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.36-lp150.5.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"python-azure-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.45-lp151.2.3.1"}]}]}],"products":[{"vendor":"microsoft","product":"azure"},{"vendor":"microsoft","product":"walinuxagent"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0804","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Patch","Vendor Advisory","fix","article"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1527","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00037.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0804","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wccr-wh3m-8q5c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-0804","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684181","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1527.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-0804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0804","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190603-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1127838","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-0804","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193393-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1159639","tags":["report"]},{"url":"https://bugzilla.suse.com/ECO-80","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193394-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200440-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014454-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1061584","tags":["report"]},{"url":"https://bugzilla.suse.com/1074865","tags":["report"]},{"url":"https://bugzilla.suse.com/1087764","tags":["report"]},{"url":"https://bugzilla.suse.com/1092831","tags":["report"]},{"url":"https://bugzilla.suse.com/1094420","tags":["report"]},{"url":"https://bugzilla.suse.com/1119542","tags":["report"]},{"url":"https://bugzilla.suse.com/1167601","tags":["report"]},{"url":"https://bugzilla.suse.com/1167602","tags":["report"]},{"url":"https://bugzilla.suse.com/1173866","tags":["report"]},{"url":"https://bugzilla.suse.com/1175130","tags":["report"]},{"url":"https://bugzilla.suse.com/997614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-0804","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3907-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IVVRHSJEIAKPRMRYUNEMTIHGMUIYZEMP/#IVVRHSJEIAKPRMRYUNEMTIHGMUIYZEMP","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SHKGZ5ZRZX2UW3S2O7UNPYI7CRK4C5TE/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-0804","description":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.","status":"published","published":"2019-04-09T02:32:46Z","modified":"2024-08-04T17:58:59.566Z","updated_at":"2026-11-02T14:32:24.473448Z"}],"euvd":[{"id":"EUVD-2019-1560","description":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.","status":"published","published":"2019-04-09T02:32:46Z","modified":"2024-08-04T17:58:59Z","updated_at":"2026-11-03T03:07:00.558698Z"}],"ghsa":[{"id":"GHSA-wccr-wh3m-8q5c","title":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files...","description":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.","status":"published","published":"2022-05-13T01:21:36Z","modified":"2023-02-01T05:06:35Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:50:22.895109Z"}],"nvd":[{"id":"CVE-2019-0804","description":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.","status":"published","published":"2019-04-09T03:29:00.843Z","modified":"2026-06-17T02:08:56.503Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:05:11.426883Z"}],"osv":[{"id":"CVE-2019-0804","description":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.","status":"published","published":"2019-04-09T03:29:00.843Z","modified":"2026-10-24T10:30:53.903636542Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:10.051046Z"},{"id":"DEBIAN-CVE-2019-0804","description":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.","status":"published","published":"2019-04-09T03:29:00.843Z","modified":"2026-09-21T07:00:33.938521497Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"RHSA-2019:1527","title":"Red Hat Security Advisory: WALinuxAgent security update","status":"published","published":"2024-09-16T02:35:04Z","modified":"2025-11-22T11:43:32Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2019-0804","description":"An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.","status":"published","published":"2019-03-12T00:00:00Z","modified":"2026-02-04T04:08:33.24345Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"DLA-1709-1","title":"waagent - security update","status":"published","published":"2019-03-12T00:00:00Z","modified":"2026-03-09T01:22:07.559813Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4406-1","title":"waagent - security update","status":"published","published":"2019-03-12T00:00:00Z","modified":"2026-03-09T02:11:26.677332Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2019:1106-1","title":"Security update for python-azure-agent","description":"This update for python-azure-agent fixes the following issues:\n\n- CVE-2019-0804: An issue with swapfile handling in the agent created a data leak situation that exposes system memory data. (bsc#1127838)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-02T11:00:03Z","modified":"2026-02-04T04:08:02.710794Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2020:0261-1","title":"Security update for python-azure-agent","description":"This update for python-azure-agent fixes the following issues:\n\npython-azure-agent was updated to version 2.2.45 (jsc#ECO-80)\n\n+ Add support for Gen2 VM resource disks\n+ Use alternate systemd detection\n+ Fix /proc/net/route requirement that causes errors on FreeBSD\n+ Add cloud-init auto-detect to prevent multiple provisioning mechanisms\n  from relying on configuration for coordination\n+ Disable cgroups when daemon is setup incorrectly\n+ Remove upgrade extension loop for the same goal state\n+ Add container id for extension telemetry events\n+ Be more exact when detecting IMDS service health\n+ Changing add_event to start sending missing fields\n\nFrom 2.2.44 update:\n\n+ Remove outdated extension ZIP packages\n+ Improved error handling when starting extensions using systemd\n+ Reduce provisioning time of some custom images\n+ Improve the handling of extension download errors\n+ New API for extension authors to handle errors during extension update\n+ Fix handling of errors in calls to openssl\n+ Improve logic to determine current distro\n+ Reduce verbosity of several logging statements\n\nFrom 2.2.42 update:\n\n+ Poll for artifact blob, addresses goal state procesing issue\n\nFrom 2.2.41 update:\n\n+ Rewriting the mechanism to start the extension using systemd-run for\n  systems using systemd for managing\n+ Refactoring of resource monitoring framework using cgroup for both\n  systemd and non-systemd approaches [#1530, #1534]\n+ Telemetry pipeline for resource monitoring data\n\nFrom 2.2.40 update:\n\n+ Fixed tracking of memory/cpu usage\n+ Do not prevent extensions from running if setting up cgroups fails\n+ Enable systemd-aware deprovisioning on all versions \u003e= 18.04\n+ Add systemd support for Debian Jessie, Stretch, and Buster\n+ Support for Linux Openwrt\n\nFrom 2.2.38 update:\n\nSecurity issue fixed:\n+ CVE-2019-0804: An issue with swapfile handling in the agent creates\n  a data leak situation that exposes system memory data.  (bsc#1127838)\n+ Add fixes for handling swap file and other nit fixes\n\nFrom 2.2.37 update:\n+ Improves re-try logic to handle errors while downloading extensions\n\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-02-29T17:14:01Z","modified":"2026-02-04T04:19:03.563265Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11217-1","title":"python-azure-agent-2.2.49.2-4.5 on GA media","description":"These are all security issues fixed in the python-azure-agent-2.2.49.2-4.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:08:37.865917Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:0603-1","title":"Security update for python-azure-agent","description":"This update for python-azure-agent fixes the following issues:\n\n- CVE-2019-0804: An issue with swapfile handling in the agent created a data leak situation that exposes system memory data. (bsc#1127838)\n","status":"published","published":"2019-03-13T09:08:38Z","modified":"2026-02-04T03:52:34.287637Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:3393-1","title":"Security update for python-azure-agent","description":"This update for python-azure-agent fixes the following issues:\n\nUpdate to version 2.2.45 (jsc#ECO-80 bsc#1159639)\n\n+ Add support for Gen2 VM resource disks\n+ Use alternate systemd detection\n+ Fix /proc/net/route requirement that causes errors on FreeBSD\n+ Add cloud-init auto-detect to prevent multiple provisioning mechanisms\n  from relying on configuration for coordination\n+ Disable cgroups when daemon is setup incorrectly\n+ Remove upgrade extension loop for the same goal state\n+ Add container id for extension telemetry events\n+ Be more exact when detecting IMDS service health\n+ Changing add_event to start sending missing fields\n\nUpdate to version 2.2.44:\n\n+ Remove outdated extension ZIP packages\n+ Improved error handling when starting extensions using systemd\n+ Reduce provisioning time of some custom images\n+ Improve the handling of extension download errors\n+ New API for extension authors to handle errors during extension update\n+ Fix handling of errors in calls to openssl\n+ Improve logic to determine current distro\n+ Reduce verbosity of several logging statements\n\nUpdate to version 2.2.42:\n\n+ Poll for artifact blob, addresses goal state procesing issue\n\nUpdate to version 2.2.41:\n\n+ Rewriting the mechanism to start the extension using systemd-run for\n  systems using systemd for managing\n+ Refactoring of resource monitoring framework using cgroup for both\n  systemd and non-systemd approaches [#1530, #1534]\n+ Telemetry pipeline for resource monitoring data\n\nUpdate to version 2.2.40:\n\n+ Fixed tracking of memory/cpu usage\n+ Do not prevent extensions from running if setting up cgroups fails\n+ Enable systemd-aware deprovisioning on all versions \u003e= 18.04\n+ Add systemd support for Debian Jessie, Stretch, and Buster\n+ Support for Linux Openwrt\n\nUpdate to version 2.2.38:\n\n+ CVE-2019-0804: WALinuxAgent could be made to expose sensitive information. (bsc#1127838)\n+ Add fixes for handling swap file and other nit fixes\n\nUpdate to version 2.2.37:\n\n+ Improves re-try logic to handle errors while downloading extensions\n","status":"published","published":"2019-12-30T13:04:35Z","modified":"2026-02-04T02:52:56.716252Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3394-1","title":"Security update for python-azure-agent","description":"This update for python-azure-agent fixes the following issues:\n\nUpdate to version 2.2.45 (jsc#ECO-80)\n\n+ Add support for Gen2 VM resource disks\n+ Use alternate systemd detection\n+ Fix /proc/net/route requirement that causes errors on FreeBSD\n+ Add cloud-init auto-detect to prevent multiple provisioning mechanisms\n  from relying on configuration for coordination\n+ Disable cgroups when daemon is setup incorrectly\n+ Remove upgrade extension loop for the same goal state\n+ Add container id for extension telemetry events\n+ Be more exact when detecting IMDS service health\n+ Changing add_event to start sending missing fields\n\nUpdate to version 2.2.44:\n\n+ Remove outdated extension ZIP packages\n+ Improved error handling when starting extensions using systemd\n+ Reduce provisioning time of some custom images\n+ Improve the handling of extension download errors\n+ New API for extension authors to handle errors during extension update\n+ Fix handling of errors in calls to openssl\n+ Improve logic to determine current distro\n+ Reduce verbosity of several logging statements\n\nUpdate to version 2.2.42:\n\n+ Poll for artifact blob, addresses goal state procesing issue\n\nUpdate to version 2.2.41:\n\n+ Rewriting the mechanism to start the extension using systemd-run for\n  systems using systemd for managing\n+ Refactoring of resource monitoring framework using cgroup for both\n  systemd and non-systemd approaches [#1530, #1534]\n+ Telemetry pipeline for resource monitoring data\n\nUpdate to version 2.2.40:\n\n+ Fixed tracking of memory/cpu usage\n+ Do not prevent extensions from running if setting up cgroups fails\n+ Enable systemd-aware deprovisioning on all versions \u003e= 18.04\n+ Add systemd support for Debian Jessie, Stretch, and Buster\n+ Support for Linux Openwrt\n\nUpdate to version 2.2.38:\n\n+ CVE-2019-0804: An issue with swapfile handling in the agent creates a data leak situation that exposes system memory data. (bsc#1127838)\n+ Add fixes for handling swap file and other nit fixes\n\nUpdate to 2.2.37:\n\n+ Improves re-try logic to handle errors while downloading extensions\n","status":"published","published":"2019-12-30T13:04:45Z","modified":"2026-02-04T02:48:04.819417Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0440-1","title":"Security update for python-azure-agent","description":"This update for python-azure-agent fixes the following issues:\n\npython-azure-agent was updated to version 2.2.45 (jsc#ECO-80)\n\n+ Add support for Gen2 VM resource disks\n+ Use alternate systemd detection\n+ Fix /proc/net/route requirement that causes errors on FreeBSD\n+ Add cloud-init auto-detect to prevent multiple provisioning mechanisms\n  from relying on configuration for coordination\n+ Disable cgroups when daemon is setup incorrectly\n+ Remove upgrade extension loop for the same goal state\n+ Add container id for extension telemetry events\n+ Be more exact when detecting IMDS service health\n+ Changing add_event to start sending missing fields\n\nFrom 2.2.44 update:\n\n+ Remove outdated extension ZIP packages\n+ Improved error handling when starting extensions using systemd\n+ Reduce provisioning time of some custom images\n+ Improve the handling of extension download errors\n+ New API for extension authors to handle errors during extension update\n+ Fix handling of errors in calls to openssl\n+ Improve logic to determine current distro\n+ Reduce verbosity of several logging statements\n\nFrom 2.2.42 update:\n\n+ Poll for artifact blob, addresses goal state procesing issue\n\nFrom 2.2.41 update:\n\n+ Rewriting the mechanism to start the extension using systemd-run for\n  systems using systemd for managing\n+ Refactoring of resource monitoring framework using cgroup for both\n  systemd and non-systemd approaches [#1530, #1534]\n+ Telemetry pipeline for resource monitoring data\n\nFrom 2.2.40 update:\n\n+ Fixed tracking of memory/cpu usage\n+ Do not prevent extensions from running if setting up cgroups fails\n+ Enable systemd-aware deprovisioning on all versions \u003e= 18.04\n+ Add systemd support for Debian Jessie, Stretch, and Buster\n+ Support for Linux Openwrt\n\nFrom 2.2.38 update:\n\nSecurity issue fixed:\n+ CVE-2019-0804: An issue with swapfile handling in the agent creates\n  a data leak situation that exposes system memory data.  (bsc#1127838)\n+ Add fixes for handling swap file and other nit fixes\n\nFrom 2.2.37 update:\n+ Improves re-try logic to handle errors while downloading extensions\n\n","status":"published","published":"2020-02-24T14:31:48Z","modified":"2026-02-04T02:53:35.185919Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:14454-1","title":"Security update for python-azure-agent","description":"This update for python-azure-agent fixes the following issues:\n\n+ Properly set the dhcp configuration to push the hostname to the DHCP\n  server (bsc#1173866)\n+ Do not bring the interface down to push the hostname, just use ifup\n+ Set the hostname using hostnamectl to ensure setting is properly applied\n  (bsc#1167601, bsc#1167602)\n\nUpdate to version 2.2.45 (jsc#ECO-80)\n\n+ Add support for Gen2 VM resource disks\n+ Use alternate systemd detection\n+ Fix /proc/net/route requirement that causes errors on FreeBSD\n+ Add cloud-init auto-detect to prevent multiple provisioning mechanisms\n  from relying on configuration for coordination\n+ Disable cgroups when daemon is setup incorrectly\n+ Remove upgrade extension loop for the same goal state\n+ Add container id for extension telemetry events\n+ Be more exact when detecting IMDS service health\n+ Changing add_event to start sending missing fields\n\n","status":"published","published":"2020-08-18T07:52:06Z","modified":"2026-02-04T02:57:47.558288Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-3907-1","title":"walinuxagent vulnerability","description":"It was discovered that WALinuxAgent created swap files with incorrect\npermissions. A local attacker could possibly use this issue to obtain\nsensitive information from the swap file.\n","status":"published","published":"2019-03-12T17:46:33Z","modified":"2026-02-10T04:41:29Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}