shield Security update for pcp

SUSE-SLE-Micro-6.1-33

This update for pcp fixes the following issues: - CVE-2024-45769: Fixed `pmcd` heap corruption through metric pmstore operations (bsc#1230551). - CVE-2024-45770: Fixed `pmpost` symlink attack allowing escalating `pcp` to `root` user (bsc#1230552).

• Release Date
  Mar 7 2025
• References
  Bugzilla: 1217783, 1217826, 1222121, 1230551, 1230552
  CVEs: CVE-2023-6917, CVE-2024-3019, CVE-2024-45769, CVE-2024-45770
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Micro 6.1 ppc64le

• Packages
  libpcp3
  Performance Co-Pilot run-time libraries

  6.2.0-slfo.1.1_3.1 lock rpm

  libpcp_import1
  Performance Co-Pilot run-time import library

  6.2.0-slfo.1.1_3.1 lock rpm

  pcp-conf
  Performance Co-Pilot run-time configuration

  6.2.0-slfo.1.1_3.1 lock rpm

SUSE Linux Micro 6.1 s390x

• Packages
  libpcp3
  Performance Co-Pilot run-time libraries

  6.2.0-slfo.1.1_3.1 lock rpm

  libpcp_import1
  Performance Co-Pilot run-time import library

  6.2.0-slfo.1.1_3.1 lock rpm

  pcp-conf
  Performance Co-Pilot run-time configuration

  6.2.0-slfo.1.1_3.1 lock rpm

SUSE Linux Micro 6.1 aarch64

• Packages
  libpcp3
  Performance Co-Pilot run-time libraries

  6.2.0-slfo.1.1_3.1 lock rpm

  libpcp_import1
  Performance Co-Pilot run-time import library

  6.2.0-slfo.1.1_3.1 lock rpm

  pcp-conf
  Performance Co-Pilot run-time configuration

  6.2.0-slfo.1.1_3.1 lock rpm

SUSE Linux Micro 6.1 x86_64

• Packages
  libpcp3
  Performance Co-Pilot run-time libraries

  6.2.0-slfo.1.1_3.1 lock rpm

  libpcp_import1
  Performance Co-Pilot run-time import library

  6.2.0-slfo.1.1_3.1 lock rpm

  pcp-conf
  Performance Co-Pilot run-time configuration

  6.2.0-slfo.1.1_3.1 lock rpm