openSUSE Security Update : resource-agents (openSUSE-2020-585)

high Nessus Plugin ID 136308

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for resource-agents fixes the following issues :

- Fixed multiple vulnerabilities related to unsafe tempfile usage. (bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776 bsc#1146784 bsc#1146785 bsc#1146787)

- Fixed issues where the ocfmon user was created with a default password (bsc#1021689, bsc#1146687).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Solution

Update the affected resource-agents packages.

Plugin Details

Severity: High

ID: 136308

File Name: openSUSE-2020-585.nasl

Version: 1.1

Type: Local

Agent: unix

Family: SuSE Local Security Checks

Published: 5/4/2020

Updated: 5/4/2020

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Vulnerability Information

CPE: cpe:/o:novell:opensuse:15.1, p-cpe:/a:novell:opensuse:ldirectord, p-cpe:/a:novell:opensuse:monitoring-plugins-metadata, p-cpe:/a:novell:opensuse:resource-agents-debuginfo, p-cpe:/a:novell:opensuse:resource-agents-debugsource, p-cpe:/a:novell:opensuse:resource-agents

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 5/1/2020

Vulnerability Publication Date: 5/1/2020

Detections

Analytics