Cloud Threat Detection: To Agent or Not to Agent?

The shift towards cloud and cloud-native application architectures represents an evolutionary step forward from older paradigms. The adoption of containers, Kubernetes, and serverless functions, along with the use of cloud-based infrastructure, introduces a new set of risks and security challenge...

SUSE SLES15 Security Update : resource-agents (SUSE-SU-2022:2337-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2337-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

SUSE SLES15 Security Update : resource-agents (SUSE-SU-2022:2336-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2336-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

SUSE SLES12 Security Update : resource-agents (SUSE-SU-2022:2335-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:2335-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc. The packa...

SUSE-SU-2022:2337-1 Security update for resource-agents

This update for resource-agents fixes the following issues: Security: - Fixed unsafe tmp files and tmp files directory. bsc1146690, bsc1146691, bsc1146692, bsc1146766, bsc1146776, bsc1146784, bsc1146785, bsc1146787 - Created ocfmon user no longer has a default password. If no password is set, the...

SUSE-SU-2022:2336-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed predictable log file in /tmp in mariadb.in bsc1146691...

SUSE-SU-2022:2335-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed redictable log file in /tmp in mariadb.in bsc1146691...

PT-2022-37486

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue concerns a redirectable log file in /tmp in mariadb.in. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

PT-2022-37488

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue involves fixing unsafe temporary files and directories, as well as modifying the creation of the ocfmon user to no longer have a default password. If no password is set for...

SUSE SLES15 Security Update : resource-agents (SUSE-SU-2022:2325-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2325-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

PT-2022-37487

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue is related to a predictable log file in /tmp in mariadb.in. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

openSUSE: Security Advisory for resource-agents (SUSE-SU-2022:2325-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : resource-agents (SUSE-SU-2022:2326-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2326-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

SUSE-SU-2022:2326-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Predictable log file in /tmp in mariadb.in bsc1146691. - Allow aws-vpc-move-ip to specify an interface label to distinguish the IP address bsc1199766 - Implement options to disable DAD and to allow sending NA in the background bsc11961...

PT-2022-37485

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue involves a predictable log file in /tmp in mariadb.in. Additionally, there are updates to allow aws-vpc-move-ip to specify an interface label and to implement options for...

PT-2022-37484

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue involves a predictable log file in /tmp in mariadb.in. Additionally, there are improvements and fixes for other components, including the ability to specify an interface lab...

fence-agents bug fix and enhancement update

An update is available for fence-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fence-agents packages provide a collection of scripts for handling...

fence-agents bug fix and enhancement update

An update is available for fence-agents. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fence-agents packages provide a collection of scripts for handling...

Jenkins plugins Multiple Vulnerabilities (2022-05-17)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins Pipeline: Groovy Plugin 2689.v434009a31bf1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenki...

CVE-2022-25152

The ITarian platform SAAS / on-premise offers the possibility to run code on agents via a function called procedures. It is possible to require a mandatory approval process. Due to a vulnerability in the approval process, present in any version prior to 6.35.37347.20040, a malicious actor with a...