Ubuntu 18.10: USN-3907-1 Moderate: WALinuxAgent Information Exposure

ubuntu

March 12, 2019

WALinuxAgent could be made to expose sensitive information.

Summary

WALinuxAgent could be made to expose sensitive information.

Software Description:

- walinuxagent: Windows Azure Linux Agent

Details:

It was discovered that WALinuxAgent created swap files with incorrect

permissions. A local attacker could possibly use this issue to obtain

sensitive information from the swap file.

Topics Covered

security advisory update instructions local attack information exposure ubuntu walinuxagent

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  walinuxagent                    2.2.32-0ubuntu1~18.10.2

Ubuntu 18.04 LTS:
  walinuxagent                    2.2.32-0ubuntu1~18.04.2

Ubuntu 16.04 LTS:
  walinuxagent                    2.2.32-0ubuntu1~16.04.2

Ubuntu 14.04 LTS:
  walinuxagent                    2.2.32-0ubuntu1~14.04.2

In general, a standard system update will make all the necessary changes.