ELSA-2020-3869

Опубликовано: 06 окт. 2020

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2020-3869: pcp security, bug fix, and enhancement update (LOW)

[4.3.2-12]

Fix pcp-atop dynamic memory initialization issues (BZ 1818710)

[4.3.2-8]

Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
Resolve an selinux policy issue with pmlogger (BZ 1792859)

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

pcp

4.3.2-12.el7

pcp-conf

4.3.2-12.el7

pcp-devel

4.3.2-12.el7

pcp-doc

4.3.2-12.el7

pcp-export-pcp2elasticsearch

4.3.2-12.el7

pcp-export-pcp2graphite

4.3.2-12.el7

pcp-export-pcp2influxdb

4.3.2-12.el7

pcp-export-pcp2json

4.3.2-12.el7

pcp-export-pcp2spark

4.3.2-12.el7

pcp-export-pcp2xml

4.3.2-12.el7

pcp-export-pcp2zabbix

4.3.2-12.el7

pcp-export-zabbix-agent

4.3.2-12.el7

pcp-gui

4.3.2-12.el7

pcp-import-collectl2pcp

4.3.2-12.el7

pcp-import-ganglia2pcp

4.3.2-12.el7

pcp-import-iostat2pcp

4.3.2-12.el7

pcp-import-mrtg2pcp

4.3.2-12.el7

pcp-import-sar2pcp

4.3.2-12.el7

pcp-libs

4.3.2-12.el7

pcp-libs-devel

4.3.2-12.el7

pcp-manager

4.3.2-12.el7

pcp-pmda-activemq

4.3.2-12.el7

pcp-pmda-apache

4.3.2-12.el7

pcp-pmda-bash

4.3.2-12.el7

pcp-pmda-bind2

4.3.2-12.el7

pcp-pmda-bonding

4.3.2-12.el7

pcp-pmda-cifs

4.3.2-12.el7

pcp-pmda-cisco

4.3.2-12.el7

pcp-pmda-dbping

4.3.2-12.el7

pcp-pmda-dm

4.3.2-12.el7

pcp-pmda-docker

4.3.2-12.el7

pcp-pmda-ds389

4.3.2-12.el7

pcp-pmda-ds389log

4.3.2-12.el7

pcp-pmda-elasticsearch

4.3.2-12.el7

pcp-pmda-gfs2

4.3.2-12.el7

pcp-pmda-gluster

4.3.2-12.el7

pcp-pmda-gpfs

4.3.2-12.el7

pcp-pmda-gpsd

4.3.2-12.el7

pcp-pmda-haproxy

4.3.2-12.el7

pcp-pmda-infiniband

4.3.2-12.el7

pcp-pmda-json

4.3.2-12.el7

pcp-pmda-libvirt

4.3.2-12.el7

pcp-pmda-lio

4.3.2-12.el7

pcp-pmda-lmsensors

4.3.2-12.el7

pcp-pmda-logger

4.3.2-12.el7

pcp-pmda-lustre

4.3.2-12.el7

pcp-pmda-lustrecomm

4.3.2-12.el7

pcp-pmda-mailq

4.3.2-12.el7

pcp-pmda-memcache

4.3.2-12.el7

pcp-pmda-mic

4.3.2-12.el7

pcp-pmda-mounts

4.3.2-12.el7

pcp-pmda-mysql

4.3.2-12.el7

pcp-pmda-named

4.3.2-12.el7

pcp-pmda-netfilter

4.3.2-12.el7

pcp-pmda-news

4.3.2-12.el7

pcp-pmda-nfsclient

4.3.2-12.el7

pcp-pmda-nginx

4.3.2-12.el7

pcp-pmda-nvidia-gpu

4.3.2-12.el7

pcp-pmda-oracle

4.3.2-12.el7

pcp-pmda-pdns

4.3.2-12.el7

pcp-pmda-perfevent

4.3.2-12.el7

pcp-pmda-postfix

4.3.2-12.el7

pcp-pmda-postgresql

4.3.2-12.el7

pcp-pmda-prometheus

4.3.2-12.el7

pcp-pmda-redis

4.3.2-12.el7

pcp-pmda-roomtemp

4.3.2-12.el7

pcp-pmda-rpm

4.3.2-12.el7

pcp-pmda-rsyslog

4.3.2-12.el7

pcp-pmda-samba

4.3.2-12.el7

pcp-pmda-sendmail

4.3.2-12.el7

pcp-pmda-shping

4.3.2-12.el7

pcp-pmda-slurm

4.3.2-12.el7

pcp-pmda-smart

4.3.2-12.el7

pcp-pmda-snmp

4.3.2-12.el7

pcp-pmda-summary

4.3.2-12.el7

pcp-pmda-systemd

4.3.2-12.el7

pcp-pmda-trace

4.3.2-12.el7

pcp-pmda-unbound

4.3.2-12.el7

pcp-pmda-vmware

4.3.2-12.el7

pcp-pmda-weblog

4.3.2-12.el7

pcp-pmda-zimbra

4.3.2-12.el7

pcp-pmda-zswap

4.3.2-12.el7

pcp-selinux

4.3.2-12.el7

pcp-system-tools

4.3.2-12.el7

pcp-testsuite

4.3.2-12.el7

pcp-webapi

4.3.2-12.el7

pcp-webapp-blinkenlights

4.3.2-12.el7

pcp-webapp-grafana

4.3.2-12.el7

pcp-webapp-graphite

4.3.2-12.el7

pcp-webapp-vector

4.3.2-12.el7

pcp-webjs

4.3.2-12.el7

pcp-zeroconf

4.3.2-12.el7

perl-PCP-LogImport

4.3.2-12.el7

perl-PCP-LogSummary

4.3.2-12.el7

perl-PCP-MMV

4.3.2-12.el7

perl-PCP-PMDA

4.3.2-12.el7

python-pcp

4.3.2-12.el7

Oracle Linux x86_64

pcp

4.3.2-12.el7

pcp-conf

4.3.2-12.el7

pcp-devel

4.3.2-12.el7

pcp-doc

4.3.2-12.el7

pcp-export-pcp2elasticsearch

4.3.2-12.el7

pcp-export-pcp2graphite

4.3.2-12.el7

pcp-export-pcp2influxdb

4.3.2-12.el7

pcp-export-pcp2json

4.3.2-12.el7

pcp-export-pcp2spark

4.3.2-12.el7

pcp-export-pcp2xml

4.3.2-12.el7

pcp-export-pcp2zabbix

4.3.2-12.el7

pcp-export-zabbix-agent

4.3.2-12.el7

pcp-gui

4.3.2-12.el7

pcp-import-collectl2pcp

4.3.2-12.el7

pcp-import-ganglia2pcp

4.3.2-12.el7

pcp-import-iostat2pcp

4.3.2-12.el7

pcp-import-mrtg2pcp

4.3.2-12.el7

pcp-import-sar2pcp

4.3.2-12.el7

pcp-libs

4.3.2-12.el7

pcp-libs-devel

4.3.2-12.el7

pcp-manager

4.3.2-12.el7

pcp-pmda-activemq

4.3.2-12.el7

pcp-pmda-apache

4.3.2-12.el7

pcp-pmda-bash

4.3.2-12.el7

pcp-pmda-bcc

4.3.2-12.el7

pcp-pmda-bind2

4.3.2-12.el7

pcp-pmda-bonding

4.3.2-12.el7

pcp-pmda-cifs

4.3.2-12.el7

pcp-pmda-cisco

4.3.2-12.el7

pcp-pmda-dbping

4.3.2-12.el7

pcp-pmda-dm

4.3.2-12.el7

pcp-pmda-docker

4.3.2-12.el7

pcp-pmda-ds389

4.3.2-12.el7

pcp-pmda-ds389log

4.3.2-12.el7

pcp-pmda-elasticsearch

4.3.2-12.el7

pcp-pmda-gfs2

4.3.2-12.el7

pcp-pmda-gluster

4.3.2-12.el7

pcp-pmda-gpfs

4.3.2-12.el7

pcp-pmda-gpsd

4.3.2-12.el7

pcp-pmda-haproxy

4.3.2-12.el7

pcp-pmda-infiniband

4.3.2-12.el7

pcp-pmda-json

4.3.2-12.el7

pcp-pmda-libvirt

4.3.2-12.el7

pcp-pmda-lio

4.3.2-12.el7

pcp-pmda-lmsensors

4.3.2-12.el7

pcp-pmda-logger

4.3.2-12.el7

pcp-pmda-lustre

4.3.2-12.el7

pcp-pmda-lustrecomm

4.3.2-12.el7

pcp-pmda-mailq

4.3.2-12.el7

pcp-pmda-memcache

4.3.2-12.el7

pcp-pmda-mic

4.3.2-12.el7

pcp-pmda-mounts

4.3.2-12.el7

pcp-pmda-mysql

4.3.2-12.el7

pcp-pmda-named

4.3.2-12.el7

pcp-pmda-netfilter

4.3.2-12.el7

pcp-pmda-news

4.3.2-12.el7

pcp-pmda-nfsclient

4.3.2-12.el7

pcp-pmda-nginx

4.3.2-12.el7

pcp-pmda-nvidia-gpu

4.3.2-12.el7

pcp-pmda-oracle

4.3.2-12.el7

pcp-pmda-pdns

4.3.2-12.el7

pcp-pmda-perfevent

4.3.2-12.el7

pcp-pmda-postfix

4.3.2-12.el7

pcp-pmda-postgresql

4.3.2-12.el7

pcp-pmda-prometheus

4.3.2-12.el7

pcp-pmda-redis

4.3.2-12.el7

pcp-pmda-roomtemp

4.3.2-12.el7

pcp-pmda-rpm

4.3.2-12.el7

pcp-pmda-rsyslog

4.3.2-12.el7

pcp-pmda-samba

4.3.2-12.el7

pcp-pmda-sendmail

4.3.2-12.el7

pcp-pmda-shping

4.3.2-12.el7

pcp-pmda-slurm

4.3.2-12.el7

pcp-pmda-smart

4.3.2-12.el7

pcp-pmda-snmp

4.3.2-12.el7

pcp-pmda-summary

4.3.2-12.el7

pcp-pmda-systemd

4.3.2-12.el7

pcp-pmda-trace

4.3.2-12.el7

pcp-pmda-unbound

4.3.2-12.el7

pcp-pmda-vmware

4.3.2-12.el7

pcp-pmda-weblog

4.3.2-12.el7

pcp-pmda-zimbra

4.3.2-12.el7

pcp-pmda-zswap

4.3.2-12.el7

pcp-selinux

4.3.2-12.el7

pcp-system-tools

4.3.2-12.el7

pcp-testsuite

4.3.2-12.el7

pcp-webapi

4.3.2-12.el7

pcp-webapp-blinkenlights

4.3.2-12.el7

pcp-webapp-grafana

4.3.2-12.el7

pcp-webapp-graphite

4.3.2-12.el7

pcp-webapp-vector

4.3.2-12.el7

pcp-webjs

4.3.2-12.el7

pcp-zeroconf

4.3.2-12.el7

perl-PCP-LogImport

4.3.2-12.el7

perl-PCP-LogSummary

4.3.2-12.el7

perl-PCP-MMV

4.3.2-12.el7

perl-PCP-PMDA

4.3.2-12.el7

python-pcp

4.3.2-12.el7

Связанные CVE

CVE-2019-3696

CVE-2019-3695

Ссылки на источники

Связанные уязвимости

openSUSE-SU-2020:0213-1

suse-cvrf

почти 6 лет назад

Security update for pcp

SUSE-SU-2020:0357-1

suse-cvrf

около 6 лет назад

Security update for pcp

SUSE-SU-2020:0356-1

suse-cvrf

около 6 лет назад

Security update for pcp

SUSE-SU-2020:0355-1

suse-cvrf

около 6 лет назад

Security update for pcp

CVE-2019-3696

CVSS3: 7.3

redhat

больше 6 лет назад

A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local user pcp to overwrite arbitrary files with arbitrary content. This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux...