MGASA-2021-0045

Source
https://advisories.mageia.org/MGASA-2021-0045.html
Import Source
https://advisories.mageia.org/MGASA-2021-0045.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2021-0045
Published
2021-01-19T15:40:16Z
Modified
2026-04-16T04:25:27.175388Z
Summary
Updated resource-agents packages fix security vulnerabilities
Details

Multiple vulnerabilities related to unsafe tempfile usage (bsc#1146690, bsc#1146691, bsc#1146692, bsc#1146766, bsc#1146776, bsc#1146784, bsc#1146785, bsc#1146787).

Issues where the ocfmon user was created with a default password (bsc#1021689, bsc#1146687).

The resource-agents package has been updated to version 4.7.0, fixing these issues and several other bugs.

References
Credits

Affected packages

Mageia:7 / resource-agents

Package

Name
resource-agents
Purl
pkg:rpm/mageia/resource-agents?arch=source&distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.7.0-1.mga7

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2021-0045.json"