Skip to content
OpenAdvisories
Low ELSA-2020-3869 2 CVEs

Low: pcp security, bug fix, and enhancement update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[4.3.2-12]
- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)

[4.3.2-8]
- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)

Fixed packages 98

ReleasePackageFixed in
Oracle Linux · 7 pcp 0:4.3.2-12.el7
Oracle Linux · 7 pcp-conf 0:4.3.2-12.el7
Oracle Linux · 7 pcp-devel 0:4.3.2-12.el7
Oracle Linux · 7 pcp-doc 0:4.3.2-12.el7
Oracle Linux · 7 pcp-export-pcp2elasticsearch 0:4.3.2-12.el7
Oracle Linux · 7 pcp-export-pcp2graphite 0:4.3.2-12.el7
Oracle Linux · 7 pcp-export-pcp2influxdb 0:4.3.2-12.el7
Oracle Linux · 7 pcp-export-pcp2json 0:4.3.2-12.el7
Oracle Linux · 7 pcp-export-pcp2spark 0:4.3.2-12.el7
Oracle Linux · 7 pcp-export-pcp2xml 0:4.3.2-12.el7
Oracle Linux · 7 pcp-export-pcp2zabbix 0:4.3.2-12.el7
Oracle Linux · 7 pcp-export-zabbix-agent 0:4.3.2-12.el7
Oracle Linux · 7 pcp-gui 0:4.3.2-12.el7
Oracle Linux · 7 pcp-import-collectl2pcp 0:4.3.2-12.el7
Oracle Linux · 7 pcp-import-ganglia2pcp 0:4.3.2-12.el7
Oracle Linux · 7 pcp-import-iostat2pcp 0:4.3.2-12.el7
Oracle Linux · 7 pcp-import-mrtg2pcp 0:4.3.2-12.el7
Oracle Linux · 7 pcp-import-sar2pcp 0:4.3.2-12.el7
Oracle Linux · 7 pcp-libs 0:4.3.2-12.el7
Oracle Linux · 7 pcp-libs-devel 0:4.3.2-12.el7
Oracle Linux · 7 pcp-manager 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-activemq 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-apache 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-bash 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-bcc 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-bind2 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-bonding 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-cifs 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-cisco 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-dbping 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-dm 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-docker 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-ds389 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-ds389log 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-elasticsearch 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-gfs2 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-gluster 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-gpfs 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-gpsd 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-haproxy 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-infiniband 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-json 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-libvirt 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-lio 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-lmsensors 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-logger 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-lustre 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-lustrecomm 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-mailq 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-memcache 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-mic 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-mounts 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-mysql 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-named 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-netfilter 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-news 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-nfsclient 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-nginx 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-nvidia-gpu 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-oracle 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-pdns 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-perfevent 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-postfix 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-postgresql 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-prometheus 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-redis 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-roomtemp 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-rpm 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-rsyslog 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-samba 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-sendmail 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-shping 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-slurm 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-smart 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-snmp 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-summary 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-systemd 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-trace 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-unbound 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-vmware 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-weblog 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-zimbra 0:4.3.2-12.el7
Oracle Linux · 7 pcp-pmda-zswap 0:4.3.2-12.el7
Oracle Linux · 7 pcp-selinux 0:4.3.2-12.el7
Oracle Linux · 7 pcp-system-tools 0:4.3.2-12.el7
Oracle Linux · 7 pcp-testsuite 0:4.3.2-12.el7
Oracle Linux · 7 pcp-webapi 0:4.3.2-12.el7
Oracle Linux · 7 pcp-webapp-blinkenlights 0:4.3.2-12.el7
Oracle Linux · 7 pcp-webapp-grafana 0:4.3.2-12.el7
Oracle Linux · 7 pcp-webapp-graphite 0:4.3.2-12.el7
Oracle Linux · 7 pcp-webapp-vector 0:4.3.2-12.el7
Oracle Linux · 7 pcp-webjs 0:4.3.2-12.el7
Oracle Linux · 7 pcp-zeroconf 0:4.3.2-12.el7
Oracle Linux · 7 perl-PCP-LogImport 0:4.3.2-12.el7
Oracle Linux · 7 perl-PCP-LogSummary 0:4.3.2-12.el7
Oracle Linux · 7 perl-PCP-MMV 0:4.3.2-12.el7
Oracle Linux · 7 perl-PCP-PMDA 0:4.3.2-12.el7
Oracle Linux · 7 python-pcp 0:4.3.2-12.el7

Vulnerabilities 2

  • High 8.4
    CVE-2019-3695

    pcp: Local privilege escalation from user pcp to root

    A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE …

    SUSE openSUSE openSUSE Leap 15.1 SUSE Linux Enterprise Server for SAP 15 Linux
  • High 8.4
    CVE-2019-3696

    pcp: Local privilege escalation from user pcp to root through migrate_tempdirs

    A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Develo…

    SUSE openSUSE openSUSE Leap 15.1 SUSE Linux Enterprise Server for SAP 15 Linux