gpp_maybe Security update for pcp

SUSE-SLE-Micro-6.0-222

This update for pcp fixes the following issues: - CVE-2024-45770: Fixed `pmpost` symlink attack allowing escalating `pcp` to `root` user (bsc#1230552). - CVE-2024-45769: Fixed `pmcd` heap corruption through metric pmstore operations (bsc#1230551). - CVE-2024-3019: Fixed exposure of the redis backend server allowing remote command execution via pmproxy (bsc#1222121). - CVE-2023-6917: Fixed Local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy (bsc#1217826). Other fixes: - Updated to version 6.2.0

• Release Date
  Mar 5 2025
• References
  Bugzilla: 1069468, 1217783, 1217826, 1222121, 1222815, 1230551, 1230552
  CVEs: CVE-2023-6917, CVE-2024-3019, CVE-2024-45769, CVE-2024-45770
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.0 s390x

• Packages
  libpcp3
  Performance Co-Pilot run-time libraries

  6.2.0-1.1 lock rpm

  libpcp_import1
  Performance Co-Pilot run-time import library

  6.2.0-1.1 lock rpm

  pcp-conf
  Performance Co-Pilot run-time configuration

  6.2.0-1.1 lock rpm

SUSE Linux Micro 6.0 aarch64

• Packages
  libpcp3
  Performance Co-Pilot run-time libraries

  6.2.0-1.1 lock rpm

  libpcp_import1
  Performance Co-Pilot run-time import library

  6.2.0-1.1 lock rpm

  pcp-conf
  Performance Co-Pilot run-time configuration

  6.2.0-1.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  libpcp3
  Performance Co-Pilot run-time libraries

  6.2.0-1.1 lock rpm

  libpcp_import1
  Performance Co-Pilot run-time import library

  6.2.0-1.1 lock rpm

  pcp-conf
  Performance Co-Pilot run-time configuration

  6.2.0-1.1 lock rpm