Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:3976-1

Опубликовано: 12 нояб. 2024
Источник: suse-cvrf

Описание

Security update for pcp

This update for pcp fixes the following issues:

pcp was updated from version 3.11.9 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389):

  • Security issues fixed:

    • CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user (bsc#1230552)
    • CVE-2024-45769: Fixed a heap corruption through metric pmstore operations (bsc#1230551)
    • CVE-2023-6917: Fixed local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy (bsc#1217826)
    • CVE-2024-3019: Disabled redis proxy by default (bsc#1222121)

  • Major changes:

    • Add version 3 PCP archive support: instance domain change-deltas, Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary timezones support, 64-bit file offsets used throughout for larger (beyond 2GB) individual volumes.
      • Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting
      • Version 2 archives remain the default (for next few years).
    • Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR); this impacts on libpcp, PMAPI clients and PMCD use of encryption; these are now configured and used consistently with pmproxy HTTPS support and redis-server, which were both already using OpenSSL.
    • New nanosecond precision timestamp PMAPI calls for PCP library interfaces that make use of timestamps.
      These are all optional, and full backward compatibility is preserved for existing tools.
    • For the full list of changes please consult the packaged CHANGELOG file

  • Other packaging changes:

    • Reintroduce libuv support for SUSE Linux Enterprise 15 (bsc#1231345)
    • Moved pmlogger_daily into main package (bsc#1222815)
    • Switched logutil and pmieutil scripts from Type=oneshot to Type=exec (bsc#1186511)
    • Change dependency from openssl-devel >= 1.1.1 to openssl-devel >= 1.0.2p. Required for SUSE Linux Enterprise 12.
    • Disabled 'pmda-infiniband' subpackage for SUSE Linux Enterprise 12 to resolve build issues.
    • Introduce 'pmda-resctrl' package, disabled for architectures other than x86_64.
    • Change the architecture for various subpackages to 'noarch' as they contain no binaries.
    • Disable 'pmda-mssql', as it fails to build.

Список пакетов

SUSE Linux Enterprise Software Development Kit 12 SP5
libpcp-devel-6.2.0-6.29.2
libpcp3-6.2.0-6.29.2
libpcp_gui2-6.2.0-6.29.2
libpcp_import1-6.2.0-6.29.2
libpcp_mmv1-6.2.0-6.29.2
libpcp_trace2-6.2.0-6.29.2
libpcp_web1-6.2.0-6.29.2
pcp-6.2.0-6.29.2
pcp-conf-6.2.0-6.29.2
pcp-devel-6.2.0-6.29.2
pcp-doc-6.2.0-6.29.2
pcp-export-pcp2graphite-6.2.0-6.29.2
pcp-export-pcp2influxdb-6.2.0-6.29.2
pcp-import-collectl2pcp-6.2.0-6.29.2
pcp-import-ganglia2pcp-6.2.0-6.29.2
pcp-import-iostat2pcp-6.2.0-6.29.2
pcp-import-mrtg2pcp-6.2.0-6.29.2
pcp-import-sar2pcp-6.2.0-6.29.2
pcp-pmda-activemq-6.2.0-6.29.2
pcp-pmda-apache-6.2.0-6.29.2
pcp-pmda-bash-6.2.0-6.29.2
pcp-pmda-bind2-6.2.0-6.29.2
pcp-pmda-bonding-6.2.0-6.29.2
pcp-pmda-cifs-6.2.0-6.29.2
pcp-pmda-cisco-6.2.0-6.29.2
pcp-pmda-dbping-6.2.0-6.29.2
pcp-pmda-dm-6.2.0-6.29.2
pcp-pmda-docker-6.2.0-6.29.2
pcp-pmda-ds389-6.2.0-6.29.2
pcp-pmda-ds389log-6.2.0-6.29.2
pcp-pmda-elasticsearch-6.2.0-6.29.2
pcp-pmda-gfs2-6.2.0-6.29.2
pcp-pmda-gluster-6.2.0-6.29.2
pcp-pmda-gpfs-6.2.0-6.29.2
pcp-pmda-gpsd-6.2.0-6.29.2
pcp-pmda-lmsensors-6.2.0-6.29.2
pcp-pmda-logger-6.2.0-6.29.2
pcp-pmda-lustre-6.2.0-6.29.2
pcp-pmda-lustrecomm-6.2.0-6.29.2
pcp-pmda-mailq-6.2.0-6.29.2
pcp-pmda-memcache-6.2.0-6.29.2
pcp-pmda-mic-6.2.0-6.29.2
pcp-pmda-mounts-6.2.0-6.29.2
pcp-pmda-mysql-6.2.0-6.29.2
pcp-pmda-named-6.2.0-6.29.2
pcp-pmda-netfilter-6.2.0-6.29.2
pcp-pmda-news-6.2.0-6.29.2
pcp-pmda-nfsclient-6.2.0-6.29.2
pcp-pmda-nginx-6.2.0-6.29.2
pcp-pmda-nutcracker-6.2.0-6.29.2
pcp-pmda-nvidia-gpu-6.2.0-6.29.2
pcp-pmda-oracle-6.2.0-6.29.2
pcp-pmda-pdns-6.2.0-6.29.2
pcp-pmda-perfevent-6.2.0-6.29.2
pcp-pmda-postfix-6.2.0-6.29.2
pcp-pmda-redis-6.2.0-6.29.2
pcp-pmda-roomtemp-6.2.0-6.29.2
pcp-pmda-rsyslog-6.2.0-6.29.2
pcp-pmda-samba-6.2.0-6.29.2
pcp-pmda-sendmail-6.2.0-6.29.2
pcp-pmda-shping-6.2.0-6.29.2
pcp-pmda-slurm-6.2.0-6.29.2
pcp-pmda-snmp-6.2.0-6.29.2
pcp-pmda-summary-6.2.0-6.29.2
pcp-pmda-systemd-6.2.0-6.29.2
pcp-pmda-trace-6.2.0-6.29.2
pcp-pmda-unbound-6.2.0-6.29.2
pcp-pmda-weblog-6.2.0-6.29.2
pcp-pmda-zimbra-6.2.0-6.29.2
pcp-pmda-zswap-6.2.0-6.29.2
pcp-system-tools-6.2.0-6.29.2
perl-PCP-LogImport-6.2.0-6.29.2
perl-PCP-LogSummary-6.2.0-6.29.2
perl-PCP-MMV-6.2.0-6.29.2
perl-PCP-PMDA-6.2.0-6.29.2
python3-pcp-6.2.0-6.29.2

Ссылки

Описание

A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp-devel-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp3-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp_gui2-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp_import1-6.2.0-6.29.2
Ссылки

Описание

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp-devel-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp3-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp_gui2-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp_import1-6.2.0-6.29.2
Ссылки

Описание

A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp-devel-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp3-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp_gui2-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp_import1-6.2.0-6.29.2
Ссылки

Описание

A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp-devel-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp3-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp_gui2-6.2.0-6.29.2
SUSE Linux Enterprise Software Development Kit 12 SP5:libpcp_import1-6.2.0-6.29.2
Ссылки
Уязвимость SUSE-SU-2024:3976-1