<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for monitoring-plugins-smart</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2021:0706-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2021-05-10T18:41:18Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-05-10T18:41:18Z</InitialReleaseDate>
    <CurrentReleaseDate>2021-05-10T18:41:18Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for monitoring-plugins-smart</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for monitoring-plugins-smart fixes the following issues:

monitoring-plugins-smart was updated to 6.9.1:

  This is a security-release (boo#1183057)
  + Fixes the regular expression for pseudo-devices under the /dev/bus/N path.
  from 6.9.0
  + Allows using PCI device paths as device name(s) (#64)
  + Introduce new optional parameter -l/--ssd-lifetime) which additionally 
    checks SMART attribute 'Percent_Lifetime_Remain' 
    (available on some SSD drives). (#66 #67)
  from 6.8.0
  + Allow skip self-assessment check (--skip-self-assessment)
  + Add Command_Timeout to default raw list
  from 6.7.1
  + Bugfix to make --warn work (issue #54)
  from 6.7.0
  + Added support for NVMe drives
  from 6.6.1
  + Fix 'deprecation warning on regex with curly brackets' (6.6.1)
  from 6.6.0
  + The feature was requested in #30 . This PR adds the possibility to
    use 3ware,N and cciss,N drives in combination with the 
    global -g parameter.
  + Furthermore this PR adjusts the output of the plugin when the -g 
    is used in combination with hardware raid controllers. Instead of
    showing the logical device name (/dev/sda for example), the plugin
    will now show the controller with drive number
  from 6.5.0:
  + Add Reported_Uncorrect and Reallocated_Event_Count to default raw list.
  + As of 6.5 the following SMART attributes are by default checked and 
    may result in alert when threshold (default 0 is reached):
    'Current_Pending_Sector,Reallocated_Sector_Ct,Program_Fail_Cnt_Total,
     Uncorrectable_Error_Cnt,Offline_Uncorrectable,Runtime_Bad_Block,
     Reported_Uncorrect,Reallocated_Event_Count'

- Update to version 6.4

  - Allow detection of more than 26 devices / issue #5 (rev 5.3)
  - Different ATA vs. SCSI lookup (rev 5.4)
  - Allow script to run outside of nagios plugins dir / wiki url
    update (rev 5.5)
  - Change syntax of -g parameter (regex is now awaited from
    input) (rev 5.6)
  - Fix Use of uninitialized value $device (rev 5.7)
  - Allow multiple devices for interface type megaraid,
    e.g. 'megaraid,[1-5]' (rev 5.8)
  - allow type 'auto' (rev 5.9)
  - Check selftest log for errors using new parameter -s (rev 5.10)
  - Add exclude list (-e) to ignore certain attributes (5.11)
  - Fix 'Use of uninitialized value' warnings (5.11.1)
  - Add raw check list (-r) and warning thresholds (-w) (6.0)
  - Allow using pseudo bus device /dev/bus/N (6.1)
  - Add device model and serial number in output (6.2)
  - Allow exclusion from perfdata as well (-E) and by attribute
    number (6.3)
  - Remove dependency on utils.pm, add quiet parameter (6.4)
- Drop not longer needed patch:
  * enable_auto_interface.patch (obsolete, type auto was added
    upstream in v5.9).

</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">openSUSE-2021-706</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MAQBDZ7JPHIZTBDSB2BCFH7Y6AA2PXXF/</URL>
      <Description>E-Mail link for openSUSE-SU-2021:0706-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1183057</URL>
      <Description>SUSE Bug 1183057</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Package Hub 15 SP1">
      <Branch Type="Product Name" Name="SUSE Package Hub 15 SP1">
        <FullProductName ProductID="SUSE Package Hub 15 SP1">SUSE Package Hub 15 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Package Hub 15 SP2">
      <Branch Type="Product Name" Name="SUSE Package Hub 15 SP2">
        <FullProductName ProductID="SUSE Package Hub 15 SP2">SUSE Package Hub 15 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.2">
      <Branch Type="Product Name" Name="openSUSE Leap 15.2">
        <FullProductName ProductID="openSUSE Leap 15.2" CPE="cpe:/o:opensuse:leap:15.2">openSUSE Leap 15.2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="monitoring-plugins-smart-6.9.1-bp152.4.3.1">
      <FullProductName ProductID="monitoring-plugins-smart-6.9.1-bp152.4.3.1">monitoring-plugins-smart-6.9.1-bp152.4.3.1</FullProductName>
    </Branch>
    <Relationship ProductReference="monitoring-plugins-smart-6.9.1-bp152.4.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Package Hub 15 SP1">
      <FullProductName ProductID="SUSE Package Hub 15 SP1:monitoring-plugins-smart-6.9.1-bp152.4.3.1">monitoring-plugins-smart-6.9.1-bp152.4.3.1 as a component of SUSE Package Hub 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="monitoring-plugins-smart-6.9.1-bp152.4.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Package Hub 15 SP2">
      <FullProductName ProductID="SUSE Package Hub 15 SP2:monitoring-plugins-smart-6.9.1-bp152.4.3.1">monitoring-plugins-smart-6.9.1-bp152.4.3.1 as a component of SUSE Package Hub 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="monitoring-plugins-smart-6.9.1-bp152.4.3.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.2">
      <FullProductName ProductID="openSUSE Leap 15.2:monitoring-plugins-smart-6.9.1-bp152.4.3.1">monitoring-plugins-smart-6.9.1-bp152.4.3.1 as a component of openSUSE Leap 15.2</FullProductName>
    </Relationship>
  </ProductTree>
</cvrfdoc>
