SUSE-SU-2026:3505-1
Security update for pcp
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924). - CVE-2026-16529: integer overflow in `__pmGetPDU` leads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926). - CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927). - Command injection in `pmieconf` `write_pmiefile` via `$HOME` and `-f` (bsc#1272928). - Command injection in `pmlogcp/pmlogmv` `do_link` via unsanitised filenames (bsc#1272930).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.5 | libpcp-devel, libpcp3, libpcp_gui2 y 18 más | 6.2.0-150500.8.9.1 |
Mostrar las 21 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.5 | libpcp-devel | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | libpcp3 | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | libpcp_gui2 | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | libpcp_import1 | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | libpcp_mmv1 | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | libpcp_trace2 | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | libpcp_web1 | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | pcp | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | pcp-conf | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | pcp-devel | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | pcp-doc | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | pcp-import-iostat2pcp | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | pcp-import-mrtg2pcp | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | pcp-import-sar2pcp | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | pcp-pmda-perfevent | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | pcp-system-tools | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | perl-PCP-LogImport | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | perl-PCP-LogSummary | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | perl-PCP-MMV | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | perl-PCP-PMDA | 6.2.0-150500.8.9.1 |
| SUSE Linux Enterprise 15.5 | python3-pcp | 6.2.0-150500.8.9.1 |
Referencias
- https://bugzilla.suse.com/1272922
- https://bugzilla.suse.com/1272923
- https://bugzilla.suse.com/1272924
- https://bugzilla.suse.com/1272925
- https://bugzilla.suse.com/1272926
- https://bugzilla.suse.com/1272927
- https://bugzilla.suse.com/1272928
- https://bugzilla.suse.com/1272930
Las 17 referencias
- https://lists.suse.com/pipermail/sle-updates/2026-August/049086.html
- https://www.suse.com/security/cve/CVE-2026-16524/
- https://www.suse.com/security/cve/CVE-2026-16526/
- https://www.suse.com/security/cve/CVE-2026-16527/
- https://www.suse.com/security/cve/CVE-2026-16529/
- https://www.suse.com/security/cve/CVE-2026-16530/
- https://www.suse.com/security/cve/CVE-2026-16531/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-20263505-1/