SUSE-SU-2020:0357-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2020:0357-1

UNKNOWN

Security update for pcp

Published Feb 7, 2020

Modified 6 years ago

Fix available

Details

This update for pcp fixes the following issues:

Security issue fixed:

CVE-2019-3696: Fixed a local privilege escalation in migrate_tempdirs() (bsc#1153921).
CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763).

Non-security issue fixed:

Fixed an dependency issue with pcp2csv (bsc#1129991).

Affected Packages(19 packages)

libpcp-devel

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

libpcp3

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

libpcp_gui2

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

libpcp_import1

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

libpcp_mmv1

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

libpcp_trace2

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

libpcp_web1

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

pcp

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

pcp-conf

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

pcp-devel

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Development Tools 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

3.11.9-5.8.1

References

https://bugzilla.suse.com/1129991

https://bugzilla.suse.com/1152763

https://bugzilla.suse.com/1153921

https://www.suse.com/security/cve/CVE-2019-3695

https://www.suse.com/security/cve/CVE-2019-3696

https://www.suse.com/support/update/announcement/2020/suse-su-20200357-1/

Upstream

CVE-2019-3695 CVE-2019-3696

Related

CVE-2019-3695 CVE-2019-3696

Ecosystems

SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15

Timeline

PublishedFeb 7, 2020

ModifiedFeb 7, 2020