openSUSE-SU-2026:21636-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21636-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21636-1

Upstream

CVE (6)

CVE-2026-16524
CVE-2026-16526
CVE-2026-16527
CVE-2026-16529
CVE-2026-16530
CVE-2026-16531

Related

CVE (6)

CVE-2026-16524
CVE-2026-16526
CVE-2026-16527
CVE-2026-16529
CVE-2026-16530
CVE-2026-16531

Published

2026-08-24T20:44:34Z

Modified

2026-08-27T18:23:12Z

Summary

Security update for pcp

Details

This update for pcp fixes the following issues:

CVE-2026-16524: command injection in linux_sockets PMDA via network.persocket.filter (bsc#1272922).
CVE-2026-16526: pmdaroot privilege escalation via FD_CLOEXEC fd inheritance and missing peer credentials (bsc#1272923).
CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
CVE-2026-16529: integer overflow in __pmGetPDU leads to permanent DoS (bsc#1272925).
CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
command injection in pmieconf write_pmiefile via $HOME and -f (bsc#1272928).
command injection in pmlogcp/pmlogmv do_link via unsanitised filenames (bsc#1272930).

References

Affected packages

openSUSE:Leap 16.0 / pcp

Package

Name: pcp
Purl: pkg:rpm/opensuse/pcp&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.2.0-160000.4.1

Ecosystem specific

{
    "binaries": [
        {
            "libpcp-devel": "6.2.0-160000.4.1",
            "libpcp3": "6.2.0-160000.4.1",
            "libpcp_gui2": "6.2.0-160000.4.1",
            "libpcp_import1": "6.2.0-160000.4.1",
            "libpcp_mmv1": "6.2.0-160000.4.1",
            "libpcp_trace2": "6.2.0-160000.4.1",
            "libpcp_web1": "6.2.0-160000.4.1",
            "pcp": "6.2.0-160000.4.1",
            "pcp-conf": "6.2.0-160000.4.1",
            "pcp-devel": "6.2.0-160000.4.1",
            "pcp-doc": "6.2.0-160000.4.1",
            "pcp-export-pcp2elasticsearch": "6.2.0-160000.4.1",
            "pcp-export-pcp2graphite": "6.2.0-160000.4.1",
            "pcp-export-pcp2influxdb": "6.2.0-160000.4.1",
            "pcp-export-pcp2json": "6.2.0-160000.4.1",
            "pcp-export-pcp2spark": "6.2.0-160000.4.1",
            "pcp-export-pcp2xml": "6.2.0-160000.4.1",
            "pcp-export-pcp2zabbix": "6.2.0-160000.4.1",
            "pcp-gui": "6.2.0-160000.4.1",
            "pcp-import-collectl2pcp": "6.2.0-160000.4.1",
            "pcp-import-ganglia2pcp": "6.2.0-160000.4.1",
            "pcp-import-iostat2pcp": "6.2.0-160000.4.1",
            "pcp-import-mrtg2pcp": "6.2.0-160000.4.1",
            "pcp-import-sar2pcp": "6.2.0-160000.4.1",
            "pcp-pmda-activemq": "6.2.0-160000.4.1",
            "pcp-pmda-apache": "6.2.0-160000.4.1",
            "pcp-pmda-bash": "6.2.0-160000.4.1",
            "pcp-pmda-bonding": "6.2.0-160000.4.1",
            "pcp-pmda-cifs": "6.2.0-160000.4.1",
            "pcp-pmda-cisco": "6.2.0-160000.4.1",
            "pcp-pmda-dbping": "6.2.0-160000.4.1",
            "pcp-pmda-dm": "6.2.0-160000.4.1",
            "pcp-pmda-docker": "6.2.0-160000.4.1",
            "pcp-pmda-ds389": "6.2.0-160000.4.1",
            "pcp-pmda-ds389log": "6.2.0-160000.4.1",
            "pcp-pmda-elasticsearch": "6.2.0-160000.4.1",
            "pcp-pmda-gfs2": "6.2.0-160000.4.1",
            "pcp-pmda-gluster": "6.2.0-160000.4.1",
            "pcp-pmda-gpfs": "6.2.0-160000.4.1",
            "pcp-pmda-gpsd": "6.2.0-160000.4.1",
            "pcp-pmda-hacluster": "6.2.0-160000.4.1",
            "pcp-pmda-haproxy": "6.2.0-160000.4.1",
            "pcp-pmda-infiniband": "6.2.0-160000.4.1",
            "pcp-pmda-json": "6.2.0-160000.4.1",
            "pcp-pmda-lio": "6.2.0-160000.4.1",
            "pcp-pmda-lmsensors": "6.2.0-160000.4.1",
            "pcp-pmda-logger": "6.2.0-160000.4.1",
            "pcp-pmda-lustre": "6.2.0-160000.4.1",
            "pcp-pmda-lustrecomm": "6.2.0-160000.4.1",
            "pcp-pmda-mailq": "6.2.0-160000.4.1",
            "pcp-pmda-memcache": "6.2.0-160000.4.1",
            "pcp-pmda-mic": "6.2.0-160000.4.1",
            "pcp-pmda-mounts": "6.2.0-160000.4.1",
            "pcp-pmda-mysql": "6.2.0-160000.4.1",
            "pcp-pmda-named": "6.2.0-160000.4.1",
            "pcp-pmda-netcheck": "6.2.0-160000.4.1",
            "pcp-pmda-netfilter": "6.2.0-160000.4.1",
            "pcp-pmda-news": "6.2.0-160000.4.1",
            "pcp-pmda-nfsclient": "6.2.0-160000.4.1",
            "pcp-pmda-nginx": "6.2.0-160000.4.1",
            "pcp-pmda-nutcracker": "6.2.0-160000.4.1",
            "pcp-pmda-nvidia-gpu": "6.2.0-160000.4.1",
            "pcp-pmda-openmetrics": "6.2.0-160000.4.1",
            "pcp-pmda-openvswitch": "6.2.0-160000.4.1",
            "pcp-pmda-oracle": "6.2.0-160000.4.1",
            "pcp-pmda-pdns": "6.2.0-160000.4.1",
            "pcp-pmda-perfevent": "6.2.0-160000.4.1",
            "pcp-pmda-postfix": "6.2.0-160000.4.1",
            "pcp-pmda-rabbitmq": "6.2.0-160000.4.1",
            "pcp-pmda-redis": "6.2.0-160000.4.1",
            "pcp-pmda-resctrl": "6.2.0-160000.4.1",
            "pcp-pmda-roomtemp": "6.2.0-160000.4.1",
            "pcp-pmda-rsyslog": "6.2.0-160000.4.1",
            "pcp-pmda-samba": "6.2.0-160000.4.1",
            "pcp-pmda-sendmail": "6.2.0-160000.4.1",
            "pcp-pmda-shping": "6.2.0-160000.4.1",
            "pcp-pmda-slurm": "6.2.0-160000.4.1",
            "pcp-pmda-smart": "6.2.0-160000.4.1",
            "pcp-pmda-snmp": "6.2.0-160000.4.1",
            "pcp-pmda-sockets": "6.2.0-160000.4.1",
            "pcp-pmda-summary": "6.2.0-160000.4.1",
            "pcp-pmda-systemd": "6.2.0-160000.4.1",
            "pcp-pmda-trace": "6.2.0-160000.4.1",
            "pcp-pmda-unbound": "6.2.0-160000.4.1",
            "pcp-pmda-weblog": "6.2.0-160000.4.1",
            "pcp-pmda-zimbra": "6.2.0-160000.4.1",
            "pcp-pmda-zswap": "6.2.0-160000.4.1",
            "pcp-selinux": "6.2.0-160000.4.1",
            "pcp-system-tools": "6.2.0-160000.4.1",
            "pcp-testsuite": "6.2.0-160000.4.1",
            "pcp-zeroconf": "6.2.0-160000.4.1",
            "perl-PCP-LogImport": "6.2.0-160000.4.1",
            "perl-PCP-LogSummary": "6.2.0-160000.4.1",
            "perl-PCP-MMV": "6.2.0-160000.4.1",
            "perl-PCP-PMDA": "6.2.0-160000.4.1",
            "python3-pcp": "6.2.0-160000.4.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21636-1.json"