Security update for pcp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:0011-1 Final 1 1 2025-01-03T16:49:05Z current 2025-01-03T16:49:05Z 2025-01-03T16:49:05Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for pcp This update for pcp fixes the following issues: Upgrade to 6.2.0 (bsc#1217826 / PED#8192): - CVE-2024-45770: Fixed symlink race (bsc#1230552). - CVE-2024-45769: Fixed pmstore corruption (bsc#1230551) - CVE-2023-6917: Fixed local privilege escalation from pcp user to root (bsc#1217826). Bug fixes: - Reintroduce libuv support for SLE >= 15 (bsc#1231345). - move pmlogger_daily into main package (bsc#1222815) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-11 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20250011-1/ Link for SUSE-SU-2025:0011-1 https://lists.suse.com/pipermail/sle-security-updates/2025-January/020062.html E-Mail link for SUSE-SU-2025:0011-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1217826 SUSE Bug 1217826 https://bugzilla.suse.com/1222815 SUSE Bug 1222815 https://bugzilla.suse.com/1230551 SUSE Bug 1230551 https://bugzilla.suse.com/1230552 SUSE Bug 1230552 https://bugzilla.suse.com/1231345 SUSE Bug 1231345 https://www.suse.com/security/cve/CVE-2023-6917/ SUSE CVE CVE-2023-6917 page https://www.suse.com/security/cve/CVE-2024-45769/ SUSE CVE CVE-2024-45769 page https://www.suse.com/security/cve/CVE-2024-45770/ SUSE CVE CVE-2024-45770 page libpcp-devel-6.2.0-150400.5.9.1 libpcp3-6.2.0-150400.5.9.1 libpcp_gui2-6.2.0-150400.5.9.1 libpcp_import1-6.2.0-150400.5.9.1 libpcp_mmv1-6.2.0-150400.5.9.1 libpcp_trace2-6.2.0-150400.5.9.1 libpcp_web1-6.2.0-150400.5.9.1 pcp-6.2.0-150400.5.9.1 pcp-conf-6.2.0-150400.5.9.1 pcp-devel-6.2.0-150400.5.9.1 pcp-doc-6.2.0-150400.5.9.1 pcp-export-pcp2elasticsearch-6.2.0-150400.5.9.1 pcp-export-pcp2graphite-6.2.0-150400.5.9.1 pcp-export-pcp2influxdb-6.2.0-150400.5.9.1 pcp-export-pcp2json-6.2.0-150400.5.9.1 pcp-export-pcp2spark-6.2.0-150400.5.9.1 pcp-export-pcp2xml-6.2.0-150400.5.9.1 pcp-export-pcp2zabbix-6.2.0-150400.5.9.1 pcp-gui-6.2.0-150400.5.9.1 pcp-import-collectl2pcp-6.2.0-150400.5.9.1 pcp-import-ganglia2pcp-6.2.0-150400.5.9.1 pcp-import-iostat2pcp-6.2.0-150400.5.9.1 pcp-import-mrtg2pcp-6.2.0-150400.5.9.1 pcp-import-sar2pcp-6.2.0-150400.5.9.1 pcp-pmda-activemq-6.2.0-150400.5.9.1 pcp-pmda-apache-6.2.0-150400.5.9.1 pcp-pmda-bash-6.2.0-150400.5.9.1 pcp-pmda-bind2-6.2.0-150400.5.9.1 pcp-pmda-bonding-6.2.0-150400.5.9.1 pcp-pmda-cifs-6.2.0-150400.5.9.1 pcp-pmda-cisco-6.2.0-150400.5.9.1 pcp-pmda-dbping-6.2.0-150400.5.9.1 pcp-pmda-dm-6.2.0-150400.5.9.1 pcp-pmda-docker-6.2.0-150400.5.9.1 pcp-pmda-ds389-6.2.0-150400.5.9.1 pcp-pmda-ds389log-6.2.0-150400.5.9.1 pcp-pmda-elasticsearch-6.2.0-150400.5.9.1 pcp-pmda-gfs2-6.2.0-150400.5.9.1 pcp-pmda-gluster-6.2.0-150400.5.9.1 pcp-pmda-gpfs-6.2.0-150400.5.9.1 pcp-pmda-gpsd-6.2.0-150400.5.9.1 pcp-pmda-hacluster-6.2.0-150400.5.9.1 pcp-pmda-haproxy-6.2.0-150400.5.9.1 pcp-pmda-infiniband-6.2.0-150400.5.9.1 pcp-pmda-json-6.2.0-150400.5.9.1 pcp-pmda-lmsensors-6.2.0-150400.5.9.1 pcp-pmda-logger-6.2.0-150400.5.9.1 pcp-pmda-lustre-6.2.0-150400.5.9.1 pcp-pmda-lustrecomm-6.2.0-150400.5.9.1 pcp-pmda-mailq-6.2.0-150400.5.9.1 pcp-pmda-memcache-6.2.0-150400.5.9.1 pcp-pmda-mic-6.2.0-150400.5.9.1 pcp-pmda-mounts-6.2.0-150400.5.9.1 pcp-pmda-mysql-6.2.0-150400.5.9.1 pcp-pmda-named-6.2.0-150400.5.9.1 pcp-pmda-netcheck-6.2.0-150400.5.9.1 pcp-pmda-netfilter-6.2.0-150400.5.9.1 pcp-pmda-news-6.2.0-150400.5.9.1 pcp-pmda-nfsclient-6.2.0-150400.5.9.1 pcp-pmda-nginx-6.2.0-150400.5.9.1 pcp-pmda-nutcracker-6.2.0-150400.5.9.1 pcp-pmda-nvidia-gpu-6.2.0-150400.5.9.1 pcp-pmda-openmetrics-6.2.0-150400.5.9.1 pcp-pmda-openvswitch-6.2.0-150400.5.9.1 pcp-pmda-oracle-6.2.0-150400.5.9.1 pcp-pmda-pdns-6.2.0-150400.5.9.1 pcp-pmda-perfevent-6.2.0-150400.5.9.1 pcp-pmda-postfix-6.2.0-150400.5.9.1 pcp-pmda-rabbitmq-6.2.0-150400.5.9.1 pcp-pmda-redis-6.2.0-150400.5.9.1 pcp-pmda-resctrl-6.2.0-150400.5.9.1 pcp-pmda-roomtemp-6.2.0-150400.5.9.1 pcp-pmda-rsyslog-6.2.0-150400.5.9.1 pcp-pmda-samba-6.2.0-150400.5.9.1 pcp-pmda-sendmail-6.2.0-150400.5.9.1 pcp-pmda-shping-6.2.0-150400.5.9.1 pcp-pmda-slurm-6.2.0-150400.5.9.1 pcp-pmda-smart-6.2.0-150400.5.9.1 pcp-pmda-snmp-6.2.0-150400.5.9.1 pcp-pmda-sockets-6.2.0-150400.5.9.1 pcp-pmda-summary-6.2.0-150400.5.9.1 pcp-pmda-systemd-6.2.0-150400.5.9.1 pcp-pmda-trace-6.2.0-150400.5.9.1 pcp-pmda-unbound-6.2.0-150400.5.9.1 pcp-pmda-weblog-6.2.0-150400.5.9.1 pcp-pmda-zimbra-6.2.0-150400.5.9.1 pcp-pmda-zswap-6.2.0-150400.5.9.1 pcp-system-tools-6.2.0-150400.5.9.1 pcp-testsuite-6.2.0-150400.5.9.1 pcp-zeroconf-6.2.0-150400.5.9.1 perl-PCP-LogImport-6.2.0-150400.5.9.1 perl-PCP-LogSummary-6.2.0-150400.5.9.1 perl-PCP-MMV-6.2.0-150400.5.9.1 perl-PCP-PMDA-6.2.0-150400.5.9.1 python3-pcp-6.2.0-150400.5.9.1 A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation. CVE-2023-6917 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250011-1/ https://www.suse.com/security/cve/CVE-2023-6917.html CVE-2023-6917 https://bugzilla.suse.com/1217826 SUSE Bug 1217826 A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash. CVE-2024-45769 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250011-1/ https://www.suse.com/security/cve/CVE-2024-45769.html CVE-2024-45769 https://bugzilla.suse.com/1230551 SUSE Bug 1230551 A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges. CVE-2024-45770 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250011-1/ https://www.suse.com/security/cve/CVE-2024-45770.html CVE-2024-45770 https://bugzilla.suse.com/1217826 SUSE Bug 1217826