{"answers":{"affected":"","exploited":"There is no known exploitation of openSUSE-SU-2021:0706-1 in the wild and no public exploit code.","fix":"Upgrade to a fixed version.","what":"openSUSE-SU-2021:0706-1 is a vulnerability in monitoring-plugins-smart, published on 10 May 2021."},"fix_prompt":"Check this codebase for openSUSE-SU-2021:0706-1 and fix it if it is affected.\n\nWhat it is: openSUSE-SU-2021:0706-1 is a vulnerability in monitoring-plugins-smart, published on 10 May 2021. \nExploitation: There is no known exploitation of openSUSE-SU-2021:0706-1 in the wild and no public exploit code.\n\nAffected product: monitoring-plugins-smart. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/openSUSE-SU-2021-0706-1/ (Markdown: https://insights.sbomify.com/openSUSE-SU-2021-0706-1/index.md)","id":"openSUSE-SU-2021:0706-1","markdown":"https://insights.sbomify.com/openSUSE-SU-2021-0706-1/index.md","name":"openSUSE-SU-2021:0706-1","record":{"aliases":[],"analysis":{"component_type":"server_software","fix_type":"upgrade","impacts":["other"],"network_reachable":"unknown","non_default_config":false,"product_category":"Monitoring plugin","requires_auth":"none","summary":"An update to monitoring-plugins-smart fixes a regular expression issue for pseudo-devices, potentially preventing incorrect device identification or monitoring failures.","user_interaction":"not_required","vuln_class":"other"},"analysis_generated_by":"qwen3.8-flash-next","assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"This update for monitoring-plugins-smart fixes the following issues:\n\nmonitoring-plugins-smart was updated to 6.9.1:\n\n  This is a security-release (boo#1183057)\n  + Fixes the regular expression for pseudo-devices under the /dev/bus/N path.\n  from 6.9.0\n  + Allows using PCI device paths as device name(s) (#64)\n  + Introduce new optional parameter -l/--ssd-lifetime) which additionally \n    checks SMART attribute 'Percent_Lifetime_Remain' \n    (available on some SSD drives). (#66 #67)\n  from 6.8.0\n  + Allow skip self-assessment check (--skip-self-assessment)\n  + Add Command_Timeout to default raw list\n  from 6.7.1\n  + Bugfix to make --warn work (issue #54)\n  from 6.7.0\n  + Added support for NVMe drives\n  from 6.6.1\n  + Fix 'deprecation warning on regex with curly brackets' (6.6.1)\n  from 6.6.0\n  + The feature was requested in #30 . This PR adds the possibility to\n    use 3ware,N and cciss,N drives in combination with the \n    global -g parameter.\n  + Furthermore this PR adjusts the output of the plugin when the -g \n    is used in combination with hardware raid controllers. Instead of\n    showing the logical device name (/dev/sda for example), the plugin\n    will now show the controller with drive number\n  from 6.5.0:\n  + Add Reported_Uncorrect and Reallocated_Event_Count to default raw list.\n  + As of 6.5 the following SMART attributes are by default checked and \n    may result in alert when threshold (default 0 is reached):\n    'Current_Pending_Sector,Reallocated_Sector_Ct,Program_Fail_Cnt_Total,\n     Uncorrectable_Error_Cnt,Offline_Uncorrectable,Runtime_Bad_Block,\n     Reported_Uncorrect,Reallocated_Event_Count'\n\n- Update to version 6.4\n\n  - Allow detection of more than 26 devices / issue #5 (rev 5.3)\n  - Different ATA vs. SCSI lookup (rev 5.4)\n  - Allow script to run outside of nagios plugins dir / wiki url\n    update (rev 5.5)\n  - Change syntax of -g parameter (regex is now awaited from\n    input) (rev 5.6)\n  - Fix Use of uninitialized value $device (rev 5.7)\n  - Allow multiple devices for interface type megaraid,\n    e.g. 'megaraid,[1-5]' (rev 5.8)\n  - allow type 'auto' (rev 5.9)\n  - Check selftest log for errors using new parameter -s (rev 5.10)\n  - Add exclude list (-e) to ignore certain attributes (5.11)\n  - Fix 'Use of uninitialized value' warnings (5.11.1)\n  - Add raw check list (-r) and warning thresholds (-w) (6.0)\n  - Allow using pseudo bus device /dev/bus/N (6.1)\n  - Add device model and serial number in output (6.2)\n  - Allow exclusion from perfdata as well (-E) and by attribute\n    number (6.3)\n  - Remove dependency on utils.pm, add quiet parameter (6.4)\n- Drop not longer needed patch:\n  * enable_auto_interface.patch (obsolete, type auto was added\n    upstream in v5.9).","ecosystems":["SUSE:Package Hub 15 SP1","SUSE:Package Hub 15 SP2","openSUSE:Leap 15.2"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":true,"headline":"Security update for monitoring-plugins-smart","id":"openSUSE-SU-2021:0706-1","indexable":true,"kev":null,"kind":"advisory","links":{"ecosystem":null,"product":null,"products":[],"type":"other","year":"2021"},"n_packages":3,"n_references":null,"packages":[{"ecosystem":"SUSE:Package Hub 15 SP1","fixed":["6.9.1-bp152.4.3.1"],"introduced":["0"],"last_affected":[],"package":"monitoring-plugins-smart","purl":"pkg:rpm/suse/monitoring-plugins-smart\u0026distro=SUSE%20Package%20Hub%2015%20SP1","source":"openSUSE-SU-2021:0706-1"},{"ecosystem":"SUSE:Package Hub 15 SP2","fixed":["6.9.1-bp152.4.3.1"],"introduced":["0"],"last_affected":[],"package":"monitoring-plugins-smart","purl":"pkg:rpm/suse/monitoring-plugins-smart\u0026distro=SUSE%20Package%20Hub%2015%20SP2","source":"openSUSE-SU-2021:0706-1"},{"ecosystem":"openSUSE:Leap 15.2","fixed":["6.9.1-bp152.4.3.1"],"introduced":["0"],"last_affected":[],"package":"monitoring-plugins-smart","purl":"pkg:rpm/opensuse/monitoring-plugins-smart\u0026distro=openSUSE%20Leap%2015.2","source":"openSUSE-SU-2021:0706-1"}],"products":null,"published":"2021-05-10","related":[],"sources":[{"class":"attribution","licence":"CC BY 4.0","name":"SUSE","prefix":"openSUSE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":"An update to monitoring-plugins-smart fixes a regular expression issue for pseudo-devices, potentially preventing incorrect device identification or monitoring failures.","url":"https://insights.sbomify.com/openSUSE-SU-2021-0706-1/"}