SUSE-SU-2020:0355-1

Source
https://www.suse.com/support/update/announcement/2020/suse-su-20200355-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0355-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2020:0355-1
Upstream
CVE (2)
  • CVE-2019-3695
  • CVE-2019-3696
Related
Published
2020-02-07T09:33:05Z
Modified
2026-02-04T03:43:35Z
Summary
Security update for pcp
Details

This update for pcp fixes the following issues:

Security issue fixed:

  • CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763).

Non-security issue fixed:

  • Fixed an dependency issue with pcp2csv (bsc#1129991).
References

Affected packages

SUSE:Linux Enterprise Module for Development Tools 15 SP1 / pcp

Package

Name
pcp
Purl
pkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.3.1-3.5.3

Ecosystem specific

{
    "binaries":  [
        {
            "libpcp-devel":  "4.3.1-3.5.3",
            "libpcp3":  "4.3.1-3.5.3",
            "libpcp_gui2":  "4.3.1-3.5.3",
            "libpcp_import1":  "4.3.1-3.5.3",
            "libpcp_mmv1":  "4.3.1-3.5.3",
            "libpcp_trace2":  "4.3.1-3.5.3",
            "libpcp_web1":  "4.3.1-3.5.3",
            "pcp":  "4.3.1-3.5.3",
            "pcp-conf":  "4.3.1-3.5.3",
            "pcp-devel":  "4.3.1-3.5.3",
            "pcp-doc":  "4.3.1-3.5.3",
            "pcp-import-iostat2pcp":  "4.3.1-3.5.3",
            "pcp-import-mrtg2pcp":  "4.3.1-3.5.3",
            "pcp-import-sar2pcp":  "4.3.1-3.5.3",
            "pcp-pmda-perfevent":  "4.3.1-3.5.3",
            "pcp-system-tools":  "4.3.1-3.5.3",
            "perl-PCP-LogImport":  "4.3.1-3.5.3",
            "perl-PCP-LogSummary":  "4.3.1-3.5.3",
            "perl-PCP-MMV":  "4.3.1-3.5.3",
            "perl-PCP-PMDA":  "4.3.1-3.5.3",
            "python3-pcp":  "4.3.1-3.5.3"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0355-1.json"