SUSE-SU-2024:3976-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2024/suse-su-20243976-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:3976-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2024:3976-1
Upstream
CVE (4)
Related
CVE (4)
Published
2024-11-12T07:12:36Z
Modified
2026-02-04T03:46:27Z
Summary
Security update for pcp
Details

This update for pcp fixes the following issues:

pcp was updated from version 3.11.9 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389):

  • Security issues fixed:

    • CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user (bsc#1230552)
    • CVE-2024-45769: Fixed a heap corruption through metric pmstore operations (bsc#1230551)
    • CVE-2023-6917: Fixed local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy (bsc#1217826)
    • CVE-2024-3019: Disabled redis proxy by default (bsc#1222121)

  • Major changes:

    • Add version 3 PCP archive support: instance domain change-deltas, Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary timezones support, 64-bit file offsets used throughout for larger (beyond 2GB) individual volumes.
      • Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting
      • Version 2 archives remain the default (for next few years).
    • Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR); this impacts on libpcp, PMAPI clients and PMCD use of encryption; these are now configured and used consistently with pmproxy HTTPS support and redis-server, which were both already using OpenSSL.
    • New nanosecond precision timestamp PMAPI calls for PCP library interfaces that make use of timestamps.
      These are all optional, and full backward compatibility is preserved for existing tools.
    • For the full list of changes please consult the packaged CHANGELOG file

  • Other packaging changes:

    • Reintroduce libuv support for SUSE Linux Enterprise 15 (bsc#1231345)
    • Moved pmlogger_daily into main package (bsc#1222815)
    • Switched logutil and pmieutil scripts from Type=oneshot to Type=exec (bsc#1186511)
    • Change dependency from openssl-devel >= 1.1.1 to openssl-devel >= 1.0.2p. Required for SUSE Linux Enterprise 12.
    • Disabled 'pmda-infiniband' subpackage for SUSE Linux Enterprise 12 to resolve build issues.
    • Introduce 'pmda-resctrl' package, disabled for architectures other than x86_64.
    • Change the architecture for various subpackages to 'noarch' as they contain no binaries.
    • Disable 'pmda-mssql', as it fails to build.
References

Affected packages

SUSE:Linux Enterprise Software Development Kit 12 SP5 / pcp

Package

Name
pcp
Purl
pkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.2.0-6.29.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libpcp-devel":  "6.2.0-6.29.2",
            "libpcp3":  "6.2.0-6.29.2",
            "libpcp_gui2":  "6.2.0-6.29.2",
            "libpcp_import1":  "6.2.0-6.29.2",
            "libpcp_mmv1":  "6.2.0-6.29.2",
            "libpcp_trace2":  "6.2.0-6.29.2",
            "libpcp_web1":  "6.2.0-6.29.2",
            "pcp":  "6.2.0-6.29.2",
            "pcp-conf":  "6.2.0-6.29.2",
            "pcp-devel":  "6.2.0-6.29.2",
            "pcp-doc":  "6.2.0-6.29.2",
            "pcp-export-pcp2graphite":  "6.2.0-6.29.2",
            "pcp-export-pcp2influxdb":  "6.2.0-6.29.2",
            "pcp-import-collectl2pcp":  "6.2.0-6.29.2",
            "pcp-import-ganglia2pcp":  "6.2.0-6.29.2",
            "pcp-import-iostat2pcp":  "6.2.0-6.29.2",
            "pcp-import-mrtg2pcp":  "6.2.0-6.29.2",
            "pcp-import-sar2pcp":  "6.2.0-6.29.2",
            "pcp-pmda-activemq":  "6.2.0-6.29.2",
            "pcp-pmda-apache":  "6.2.0-6.29.2",
            "pcp-pmda-bash":  "6.2.0-6.29.2",
            "pcp-pmda-bind2":  "6.2.0-6.29.2",
            "pcp-pmda-bonding":  "6.2.0-6.29.2",
            "pcp-pmda-cifs":  "6.2.0-6.29.2",
            "pcp-pmda-cisco":  "6.2.0-6.29.2",
            "pcp-pmda-dbping":  "6.2.0-6.29.2",
            "pcp-pmda-dm":  "6.2.0-6.29.2",
            "pcp-pmda-docker":  "6.2.0-6.29.2",
            "pcp-pmda-ds389":  "6.2.0-6.29.2",
            "pcp-pmda-ds389log":  "6.2.0-6.29.2",
            "pcp-pmda-elasticsearch":  "6.2.0-6.29.2",
            "pcp-pmda-gfs2":  "6.2.0-6.29.2",
            "pcp-pmda-gluster":  "6.2.0-6.29.2",
            "pcp-pmda-gpfs":  "6.2.0-6.29.2",
            "pcp-pmda-gpsd":  "6.2.0-6.29.2",
            "pcp-pmda-lmsensors":  "6.2.0-6.29.2",
            "pcp-pmda-logger":  "6.2.0-6.29.2",
            "pcp-pmda-lustre":  "6.2.0-6.29.2",
            "pcp-pmda-lustrecomm":  "6.2.0-6.29.2",
            "pcp-pmda-mailq":  "6.2.0-6.29.2",
            "pcp-pmda-memcache":  "6.2.0-6.29.2",
            "pcp-pmda-mic":  "6.2.0-6.29.2",
            "pcp-pmda-mounts":  "6.2.0-6.29.2",
            "pcp-pmda-mysql":  "6.2.0-6.29.2",
            "pcp-pmda-named":  "6.2.0-6.29.2",
            "pcp-pmda-netfilter":  "6.2.0-6.29.2",
            "pcp-pmda-news":  "6.2.0-6.29.2",
            "pcp-pmda-nfsclient":  "6.2.0-6.29.2",
            "pcp-pmda-nginx":  "6.2.0-6.29.2",
            "pcp-pmda-nutcracker":  "6.2.0-6.29.2",
            "pcp-pmda-nvidia-gpu":  "6.2.0-6.29.2",
            "pcp-pmda-oracle":  "6.2.0-6.29.2",
            "pcp-pmda-pdns":  "6.2.0-6.29.2",
            "pcp-pmda-perfevent":  "6.2.0-6.29.2",
            "pcp-pmda-postfix":  "6.2.0-6.29.2",
            "pcp-pmda-redis":  "6.2.0-6.29.2",
            "pcp-pmda-roomtemp":  "6.2.0-6.29.2",
            "pcp-pmda-rsyslog":  "6.2.0-6.29.2",
            "pcp-pmda-samba":  "6.2.0-6.29.2",
            "pcp-pmda-sendmail":  "6.2.0-6.29.2",
            "pcp-pmda-shping":  "6.2.0-6.29.2",
            "pcp-pmda-slurm":  "6.2.0-6.29.2",
            "pcp-pmda-snmp":  "6.2.0-6.29.2",
            "pcp-pmda-summary":  "6.2.0-6.29.2",
            "pcp-pmda-systemd":  "6.2.0-6.29.2",
            "pcp-pmda-trace":  "6.2.0-6.29.2",
            "pcp-pmda-unbound":  "6.2.0-6.29.2",
            "pcp-pmda-weblog":  "6.2.0-6.29.2",
            "pcp-pmda-zimbra":  "6.2.0-6.29.2",
            "pcp-pmda-zswap":  "6.2.0-6.29.2",
            "pcp-system-tools":  "6.2.0-6.29.2",
            "perl-PCP-LogImport":  "6.2.0-6.29.2",
            "perl-PCP-LogSummary":  "6.2.0-6.29.2",
            "perl-PCP-MMV":  "6.2.0-6.29.2",
            "perl-PCP-PMDA":  "6.2.0-6.29.2",
            "python3-pcp":  "6.2.0-6.29.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:3976-1.json"