Summary
[6.2.2-7]
- Fix buffer sizing checks in pmstore PDU handling (RHEL-57809)
- Guard against symlink attacks in pmpost program (RHEL-57814)
- Fix libpcp_web webgroup slow request refcounting (RHEL-58307)
- Updated pmdahacluster for newer crm_mon versions (RHEL-58303)
Fixed packages 106
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | pcp | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-conf | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-devel | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-doc | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-export-pcp2elasticsearch | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-export-pcp2graphite | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-export-pcp2influxdb | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-export-pcp2json | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-export-pcp2openmetrics | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-export-pcp2spark | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-export-pcp2xml | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-export-pcp2zabbix | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-export-zabbix-agent | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-geolocate | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-gui | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-import-collectl2pcp | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-import-ganglia2pcp | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-import-iostat2pcp | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-import-mrtg2pcp | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-import-sar2pcp | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-libs | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-libs-devel | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-activemq | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-apache | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-bash | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-bcc | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-bind2 | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-bonding | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-bpf | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-bpftrace | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-cifs | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-cisco | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-dbping | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-denki | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-dm | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-docker | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-ds389 | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-ds389log | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-elasticsearch | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-farm | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-gfs2 | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-gluster | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-gpfs | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-gpsd | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-hacluster | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-haproxy | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-infiniband | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-json | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-libvirt | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-lio | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-lmsensors | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-logger | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-lustre | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-lustrecomm | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-mailq | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-memcache | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-mic | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-mongodb | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-mounts | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-mssql | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-mysql | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-named | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-netcheck | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-netfilter | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-news | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-nfsclient | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-nginx | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-nvidia-gpu | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-openmetrics | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-openvswitch | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-oracle | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-pdns | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-perfevent | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-podman | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-postfix | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-postgresql | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-rabbitmq | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-redis | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-resctrl | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-roomtemp | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-rsyslog | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-samba | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-sendmail | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-shping | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-slurm | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-smart | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-snmp | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-sockets | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-statsd | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-summary | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-systemd | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-trace | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-unbound | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-uwsgi | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-weblog | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-zimbra | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-pmda-zswap | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-selinux | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-system-tools | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-testsuite | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | pcp-zeroconf | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | perl-PCP-LogImport | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | perl-PCP-LogSummary | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | perl-PCP-MMV | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | perl-PCP-PMDA | 0:6.2.2-7.el9_5 |
| Oracle Linux · 9 | python3-pcp | 0:6.2.2-7.el9_5 |
Vulnerabilities 2
-
Medium 5.5
Pcp: pmcd heap corruption through metric pmstore operations
A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.
-
Medium 4.4
Pcp: pmpost symlink attack allows escalating pcp to root user
A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditi…