Security update for pcp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:0357-1 Final 1 1 2020-02-07T09:34:12Z current 2020-02-07T09:34:12Z 2020-02-07T09:34:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for pcp This update for pcp fixes the following issues: Security issue fixed: - CVE-2019-3696: Fixed a local privilege escalation in migrate_tempdirs() (bsc#1153921). - CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763). Non-security issue fixed: - Fixed an dependency issue with pcp2csv (bsc#1129991). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-357,SUSE-SLE-Module-Development-Tools-15-2020-357,SUSE-SLE-Module-Development-Tools-OBS-15-2020-357,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-357,SUSE-SLE-Product-HPC-15-2020-357,SUSE-SLE-Product-SLES-15-2020-357,SUSE-SLE-Product-SLES_SAP-15-2020-357 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20200357-1/ Link for SUSE-SU-2020:0357-1 https://lists.suse.com/pipermail/sle-security-updates/2020-February/006470.html E-Mail link for SUSE-SU-2020:0357-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1129991 SUSE Bug 1129991 https://bugzilla.suse.com/1152763 SUSE Bug 1152763 https://bugzilla.suse.com/1153921 SUSE Bug 1153921 https://www.suse.com/security/cve/CVE-2019-3695/ SUSE CVE CVE-2019-3695 page https://www.suse.com/security/cve/CVE-2019-3696/ SUSE CVE CVE-2019-3696 page SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 libpcp-devel-3.11.9-5.8.1 libpcp3-3.11.9-5.8.1 libpcp_gui2-3.11.9-5.8.1 libpcp_import1-3.11.9-5.8.1 libpcp_mmv1-3.11.9-5.8.1 libpcp_trace2-3.11.9-5.8.1 libpcp_web1-3.11.9-5.8.1 pcp-3.11.9-5.8.1 pcp-conf-3.11.9-5.8.1 pcp-devel-3.11.9-5.8.1 pcp-doc-3.11.9-5.8.1 pcp-export-pcp2graphite-3.11.9-5.8.1 pcp-export-pcp2influxdb-3.11.9-5.8.1 pcp-export-zabbix-agent-3.11.9-5.8.1 pcp-gui-3.11.9-5.8.1 pcp-import-collectl2pcp-3.11.9-5.8.1 pcp-import-ganglia2pcp-3.11.9-5.8.1 pcp-import-iostat2pcp-3.11.9-5.8.1 pcp-import-mrtg2pcp-3.11.9-5.8.1 pcp-import-sar2pcp-3.11.9-5.8.1 pcp-manager-3.11.9-5.8.1 pcp-pmda-activemq-3.11.9-5.8.1 pcp-pmda-apache-3.11.9-5.8.1 pcp-pmda-bash-3.11.9-5.8.1 pcp-pmda-bind2-3.11.9-5.8.1 pcp-pmda-bonding-3.11.9-5.8.1 pcp-pmda-cifs-3.11.9-5.8.1 pcp-pmda-cisco-3.11.9-5.8.1 pcp-pmda-dbping-3.11.9-5.8.1 pcp-pmda-dm-3.11.9-5.8.1 pcp-pmda-docker-3.11.9-5.8.1 pcp-pmda-ds389-3.11.9-5.8.1 pcp-pmda-ds389log-3.11.9-5.8.1 pcp-pmda-elasticsearch-3.11.9-5.8.1 pcp-pmda-gfs2-3.11.9-5.8.1 pcp-pmda-gluster-3.11.9-5.8.1 pcp-pmda-gpfs-3.11.9-5.8.1 pcp-pmda-gpsd-3.11.9-5.8.1 pcp-pmda-infiniband-3.11.9-5.8.1 pcp-pmda-json-3.11.9-5.8.1 pcp-pmda-kvm-3.11.9-5.8.1 pcp-pmda-lmsensors-3.11.9-5.8.1 pcp-pmda-logger-3.11.9-5.8.1 pcp-pmda-lustre-3.11.9-5.8.1 pcp-pmda-lustrecomm-3.11.9-5.8.1 pcp-pmda-mailq-3.11.9-5.8.1 pcp-pmda-memcache-3.11.9-5.8.1 pcp-pmda-mic-3.11.9-5.8.1 pcp-pmda-mounts-3.11.9-5.8.1 pcp-pmda-mysql-3.11.9-5.8.1 pcp-pmda-named-3.11.9-5.8.1 pcp-pmda-netfilter-3.11.9-5.8.1 pcp-pmda-news-3.11.9-5.8.1 pcp-pmda-nfsclient-3.11.9-5.8.1 pcp-pmda-nginx-3.11.9-5.8.1 pcp-pmda-nutcracker-3.11.9-5.8.1 pcp-pmda-nvidia-gpu-3.11.9-5.8.1 pcp-pmda-oracle-3.11.9-5.8.1 pcp-pmda-papi-3.11.9-5.8.1 pcp-pmda-pdns-3.11.9-5.8.1 pcp-pmda-perfevent-3.11.9-5.8.1 pcp-pmda-postfix-3.11.9-5.8.1 pcp-pmda-postgresql-3.11.9-5.8.1 pcp-pmda-redis-3.11.9-5.8.1 pcp-pmda-roomtemp-3.11.9-5.8.1 pcp-pmda-rpm-3.11.9-5.8.1 pcp-pmda-rsyslog-3.11.9-5.8.1 pcp-pmda-samba-3.11.9-5.8.1 pcp-pmda-sendmail-3.11.9-5.8.1 pcp-pmda-shping-3.11.9-5.8.1 pcp-pmda-slurm-3.11.9-5.8.1 pcp-pmda-snmp-3.11.9-5.8.1 pcp-pmda-summary-3.11.9-5.8.1 pcp-pmda-systemd-3.11.9-5.8.1 pcp-pmda-trace-3.11.9-5.8.1 pcp-pmda-unbound-3.11.9-5.8.1 pcp-pmda-vmware-3.11.9-5.8.1 pcp-pmda-weblog-3.11.9-5.8.1 pcp-pmda-zimbra-3.11.9-5.8.1 pcp-pmda-zswap-3.11.9-5.8.1 pcp-system-tools-3.11.9-5.8.1 pcp-testsuite-3.11.9-5.8.1 pcp-webapi-3.11.9-5.8.1 perl-PCP-LogImport-3.11.9-5.8.1 perl-PCP-LogSummary-3.11.9-5.8.1 perl-PCP-MMV-3.11.9-5.8.1 perl-PCP-PMDA-3.11.9-5.8.1 python-pcp-3.11.9-5.8.1 python3-pcp-3.11.9-5.8.1 libpcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libpcp3-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libpcp_gui2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libpcp_import1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libpcp_mmv1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libpcp_trace2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libpcp_web1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp-conf-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp-doc-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp-import-iostat2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp-import-mrtg2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp-import-sar2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS perl-PCP-LogImport-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS perl-PCP-LogSummary-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS perl-PCP-MMV-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS perl-PCP-PMDA-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS python-pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libpcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libpcp3-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libpcp_gui2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libpcp_import1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libpcp_mmv1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libpcp_trace2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libpcp_web1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS pcp-conf-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS pcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS pcp-doc-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS pcp-import-iostat2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS pcp-import-mrtg2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS pcp-import-sar2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS perl-PCP-LogImport-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS perl-PCP-LogSummary-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS perl-PCP-MMV-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS perl-PCP-PMDA-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS python-pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libpcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 libpcp3-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 libpcp_gui2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 libpcp_import1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 libpcp_mmv1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 libpcp_trace2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 libpcp_web1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 pcp-conf-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 pcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 pcp-doc-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 pcp-import-iostat2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 pcp-import-mrtg2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 pcp-import-sar2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 perl-PCP-LogImport-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 perl-PCP-LogSummary-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 perl-PCP-MMV-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 perl-PCP-PMDA-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 python-pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 libpcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS libpcp3-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS libpcp_gui2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS libpcp_import1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS libpcp_mmv1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS libpcp_trace2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS libpcp_web1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS pcp-conf-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS pcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS pcp-doc-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS pcp-import-iostat2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS pcp-import-mrtg2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS pcp-import-sar2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS perl-PCP-LogImport-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS perl-PCP-LogSummary-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS perl-PCP-MMV-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS perl-PCP-PMDA-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS python-pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS libpcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libpcp3-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libpcp_gui2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libpcp_import1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libpcp_mmv1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libpcp_trace2-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libpcp_web1-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 pcp-conf-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 pcp-devel-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 pcp-doc-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 pcp-import-iostat2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 pcp-import-mrtg2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 pcp-import-sar2pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 perl-PCP-LogImport-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 perl-PCP-LogSummary-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 perl-PCP-MMV-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 perl-PCP-PMDA-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 python-pcp-3.11.9-5.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows the user pcp to run code as root by placing it into /var/log/pcp/configs.sh This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Software Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux Enterprise Software Development Kit 12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions prior to 4.3.1-lp151.2.3.1. CVE-2019-3695 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:python-pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:python-pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:python-pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:python-pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:python-pcp-3.11.9-5.8.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200357-1/ https://www.suse.com/security/cve/CVE-2019-3695.html CVE-2019-3695 https://bugzilla.suse.com/1152533 SUSE Bug 1152533 https://bugzilla.suse.com/1152763 SUSE Bug 1152763 https://bugzilla.suse.com/1154062 SUSE Bug 1154062 A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local user pcp to overwrite arbitrary files with arbitrary content. This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Software Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux Enterprise Software Development Kit 12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions prior to 4.3.1-lp151.2.3.1. CVE-2019-3696 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:python-pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:python-pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15:python-pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise Server 15-LTSS:python-pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp3-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_gui2-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_import1-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_mmv1-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_trace2-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libpcp_web1-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-conf-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-devel-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-doc-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-import-iostat2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-import-mrtg2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:pcp-import-sar2pcp-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:perl-PCP-LogImport-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:perl-PCP-LogSummary-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:perl-PCP-MMV-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:perl-PCP-PMDA-3.11.9-5.8.1 SUSE Linux Enterprise Server for SAP Applications 15:python-pcp-3.11.9-5.8.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200357-1/ https://www.suse.com/security/cve/CVE-2019-3696.html CVE-2019-3696 https://bugzilla.suse.com/1152533 SUSE Bug 1152533 https://bugzilla.suse.com/1153921 SUSE Bug 1153921 https://bugzilla.suse.com/1154062 SUSE Bug 1154062