Summary
[6.3.7-8.0.1.el9_8.4]
- Adds interval option support in PCP nfsiostat tool [Orabug: 39068870]
- Introduces proc.numa_maps metrics in linux_proc PMDA [Orabug: 39096683]
- adds numastat process option in the tool
- Added support for size based cleanup for pcp archives [Orabug: 38757778]
- Implement sorting option in pcp ps based on %cpu, %mem [Orabug: 38719615]
- Fixed pmlogger incorrectly attempts to terminate
- unauthorized process [Orabug: 38598244]
- Merges new PCP nfsiostat parser in OL [Orabug: 38817068]
- pmdanfsclient: fix regex to correctly parse NFS op stats [Orabug: 38724866]
- pmda/rocestat: skip installation when IB is absent [Orabug: 38742679]
- pmlogger_daily default xz compression changed to level 3 [Orabug: 38674828]
- Backports various pcp bugs and enhancements [Orabug: 38526328]
- [Orabug: 38526351] [Orabug: 38526381] [Orabug: 38526381]
- [Orabug: 38526450] [Orabug: 38527066]
- Add support for rocestat pmda [Orabug: 38109263]
- Add support for rocestat client [Orabug: 38109331]
[6.3.7-8.4]
- Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668)
[6.3.7-8.3]
- Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527,
RHEL-213712)
[6.3.7-8.2]
- Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737)
[6.3.7-8.1]
- Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688)
Fixed packages 108
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | pcp | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-conf | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-devel | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-doc | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-export-pcp2elasticsearch | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-export-pcp2graphite | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-export-pcp2influxdb | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-export-pcp2json | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-export-pcp2openmetrics | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-export-pcp2spark | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-export-pcp2xml | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-export-pcp2zabbix | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-export-zabbix-agent | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-geolocate | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-gui | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-import-collectl2pcp | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-import-ganglia2pcp | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-import-iostat2pcp | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-import-mrtg2pcp | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-import-sar2pcp | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-libs | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-libs-devel | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-activemq | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-amdgpu | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-apache | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-bash | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-bcc | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-bind2 | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-bonding | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-bpf | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-bpftrace | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-cifs | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-cisco | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-dbping | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-denki | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-dm | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-docker | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-ds389 | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-ds389log | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-elasticsearch | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-farm | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-gfs2 | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-gluster | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-gpfs | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-gpsd | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-hacluster | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-haproxy | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-infiniband | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-json | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-libvirt | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-lio | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-lmsensors | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-logger | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-lustre | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-lustrecomm | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-mailq | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-memcache | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-mic | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-mongodb | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-mounts | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-mssql | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-mysql | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-named | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-netcheck | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-netfilter | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-news | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-nfsclient | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-nginx | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-nvidia-gpu | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-openmetrics | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-openvswitch | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-oracle | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-pdns | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-perfevent | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-podman | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-postfix | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-postgresql | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-rabbitmq | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-redis | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-resctrl | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-rocestat | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-roomtemp | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-rsyslog | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-samba | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-sendmail | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-shping | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-slurm | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-smart | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-snmp | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-sockets | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-statsd | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-summary | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-systemd | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-trace | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-unbound | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-uwsgi | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-weblog | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-zimbra | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-pmda-zswap | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-selinux | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-system-tools | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-testsuite | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | pcp-zeroconf | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | perl-PCP-LogImport | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | perl-PCP-LogSummary | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | perl-PCP-MMV | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | perl-PCP-PMDA | 0:6.3.7-8.0.1.el9_8.4 |
| Oracle Linux · 9 | python3-pcp | 0:6.3.7-8.0.1.el9_8.4 |
Vulnerabilities 4
-
High 8.8
Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.
-
High 7.8
Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection
A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.
-
High 7.5
Pcp: pcp: denial of service due to signed integer overflow
A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet …
-
High 7.3
Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.