{"id":"SUSE-SU-2020:0357-1","summary":"Security update for pcp","details":"This update for pcp fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-3696: Fixed a local privilege escalation in migrate_tempdirs() (bsc#1153921).\n- CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763).\n\nNon-security issue fixed:\n\n- Fixed an dependency issue with pcp2csv (bsc#1129991).\n","modified":"2026-02-04T02:42:34.181448Z","published":"2020-02-07T09:34:12Z","related":["CVE-2019-3695","CVE-2019-3696"],"upstream":["CVE-2019-3695","CVE-2019-3696"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200357-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1129991"},{"type":"REPORT","url":"https://bugzilla.suse.com/1152763"},{"type":"REPORT","url":"https://bugzilla.suse.com/1153921"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-3695"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-3696"}],"affected":[{"package":{"name":"pcp","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","purl":"pkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.9-5.8.1"}]}],"ecosystem_specific":{"binaries":[{"libpcp_trace2":"3.11.9-5.8.1","pcp-import-iostat2pcp":"3.11.9-5.8.1","pcp":"3.11.9-5.8.1","perl-PCP-LogImport":"3.11.9-5.8.1","perl-PCP-LogSummary":"3.11.9-5.8.1","perl-PCP-MMV":"3.11.9-5.8.1","perl-PCP-PMDA":"3.11.9-5.8.1","python-pcp":"3.11.9-5.8.1","libpcp_gui2":"3.11.9-5.8.1","libpcp3":"3.11.9-5.8.1","libpcp_import1":"3.11.9-5.8.1","libpcp_web1":"3.11.9-5.8.1","pcp-conf":"3.11.9-5.8.1","pcp-devel":"3.11.9-5.8.1","pcp-doc":"3.11.9-5.8.1","pcp-import-mrtg2pcp":"3.11.9-5.8.1","pcp-import-sar2pcp":"3.11.9-5.8.1","libpcp-devel":"3.11.9-5.8.1","libpcp_mmv1":"3.11.9-5.8.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0357-1.json"}},{"package":{"name":"pcp","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","purl":"pkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.9-5.8.1"}]}],"ecosystem_specific":{"binaries":[{"libpcp_gui2":"3.11.9-5.8.1","libpcp_import1":"3.11.9-5.8.1","libpcp_web1":"3.11.9-5.8.1","perl-PCP-LogImport":"3.11.9-5.8.1","python-pcp":"3.11.9-5.8.1","libpcp3":"3.11.9-5.8.1","pcp-devel":"3.11.9-5.8.1","pcp-doc":"3.11.9-5.8.1","pcp-import-mrtg2pcp":"3.11.9-5.8.1","pcp":"3.11.9-5.8.1","perl-PCP-PMDA":"3.11.9-5.8.1","libpcp_trace2":"3.11.9-5.8.1","pcp-conf":"3.11.9-5.8.1","pcp-import-iostat2pcp":"3.11.9-5.8.1","pcp-import-sar2pcp":"3.11.9-5.8.1","perl-PCP-LogSummary":"3.11.9-5.8.1","libpcp-devel":"3.11.9-5.8.1","libpcp_mmv1":"3.11.9-5.8.1","perl-PCP-MMV":"3.11.9-5.8.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0357-1.json"}},{"package":{"name":"pcp","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","purl":"pkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.9-5.8.1"}]}],"ecosystem_specific":{"binaries":[{"libpcp3":"3.11.9-5.8.1","libpcp_gui2":"3.11.9-5.8.1","libpcp_mmv1":"3.11.9-5.8.1","pcp-devel":"3.11.9-5.8.1","pcp-import-mrtg2pcp":"3.11.9-5.8.1","perl-PCP-LogImport":"3.11.9-5.8.1","libpcp_trace2":"3.11.9-5.8.1","libpcp_web1":"3.11.9-5.8.1","pcp-conf":"3.11.9-5.8.1","pcp-import-iostat2pcp":"3.11.9-5.8.1","pcp-import-sar2pcp":"3.11.9-5.8.1","pcp":"3.11.9-5.8.1","perl-PCP-MMV":"3.11.9-5.8.1","libpcp_import1":"3.11.9-5.8.1","pcp-doc":"3.11.9-5.8.1","perl-PCP-LogSummary":"3.11.9-5.8.1","perl-PCP-PMDA":"3.11.9-5.8.1","python-pcp":"3.11.9-5.8.1","libpcp-devel":"3.11.9-5.8.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0357-1.json"}},{"package":{"name":"pcp","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","purl":"pkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.9-5.8.1"}]}],"ecosystem_specific":{"binaries":[{"libpcp-devel":"3.11.9-5.8.1","pcp-conf":"3.11.9-5.8.1","pcp-devel":"3.11.9-5.8.1","pcp-doc":"3.11.9-5.8.1","pcp-import-iostat2pcp":"3.11.9-5.8.1","pcp-import-sar2pcp":"3.11.9-5.8.1","perl-PCP-LogSummary":"3.11.9-5.8.1","perl-PCP-MMV":"3.11.9-5.8.1","libpcp3":"3.11.9-5.8.1","libpcp_import1":"3.11.9-5.8.1","libpcp_mmv1":"3.11.9-5.8.1","pcp-import-mrtg2pcp":"3.11.9-5.8.1","pcp":"3.11.9-5.8.1","perl-PCP-PMDA":"3.11.9-5.8.1","python-pcp":"3.11.9-5.8.1","libpcp_gui2":"3.11.9-5.8.1","libpcp_trace2":"3.11.9-5.8.1","perl-PCP-LogImport":"3.11.9-5.8.1","libpcp_web1":"3.11.9-5.8.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0357-1.json"}},{"package":{"name":"pcp","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","purl":"pkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.9-5.8.1"}]}],"ecosystem_specific":{"binaries":[{"pcp-conf":"3.11.9-5.8.1","perl-PCP-PMDA":"3.11.9-5.8.1","python-pcp":"3.11.9-5.8.1","libpcp3":"3.11.9-5.8.1","libpcp_import1":"3.11.9-5.8.1","libpcp_mmv1":"3.11.9-5.8.1","pcp-devel":"3.11.9-5.8.1","pcp-doc":"3.11.9-5.8.1","pcp-import-iostat2pcp":"3.11.9-5.8.1","libpcp-devel":"3.11.9-5.8.1","libpcp_web1":"3.11.9-5.8.1","perl-PCP-LogImport":"3.11.9-5.8.1","perl-PCP-LogSummary":"3.11.9-5.8.1","pcp-import-sar2pcp":"3.11.9-5.8.1","pcp":"3.11.9-5.8.1","libpcp_gui2":"3.11.9-5.8.1","pcp-import-mrtg2pcp":"3.11.9-5.8.1","perl-PCP-MMV":"3.11.9-5.8.1","libpcp_trace2":"3.11.9-5.8.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0357-1.json"}}],"schema_version":"1.7.3"}