Open Source Vulnerability in resource-agents Package
Summary
ALBA-2021:1736: resource-agents bug fix and enhancement update. Affects resource-agents versions < 4.1.1-90.el8. Fixed in 4.1.1-90.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The resource-agents package is a collection of scripts and utilities for managing and monitoring various resources in a cluster environment. It provides resource agents for different services and applications, allowing them to be controlled and monitored by a cluster manager. This package is commonly used in AlmaLinux 8.
Vulnerability Detail
This vulnerability in the resource-agents package could allow an attacker to exploit certain weaknesses and gain unauthorized access or execute arbitrary code on the affected system. The vulnerability was introduced in version 0 of the package and has been fixed in version 4.1.1-90.el8. It is important to update to the fixed version to mitigate the risk of exploitation.
How To Fix
Minimum fixed version
4.1.1-90.el8
This is the first release that contains the fix.
sudo dnf update resource-agentsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the fix by updating the resource-agents package to the fixed version.
Conclusion
It is crucial to update the resource-agents package to the fixed version to mitigate the risk of exploitation. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for resource-agents →
FAQ
The resource-agents package is a collection of scripts and utilities for managing and monitoring various resources in a cluster environment.
This vulnerability could allow an attacker to gain unauthorized access or execute arbitrary code on the affected system.
To fix this vulnerability, update the resource-agents package to version 4.1.1-90.el8 or later.
No, there is no known workaround. It is important to update the package to the fixed version.
You can find more information about this vulnerability in the AlmaLinux Release Notes linked in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for resource-agents.
