An update for pcp is now available for openEuler-24.03-LTS Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2024-2018 Final 1.0 1.0 2024-08-23 Initial 2024-08-23 2024-08-23 openEuler SA Tool V1.0 2024-08-23 pcp security update An update for pcp is now available for openEuler-24.03-LTS PCP provides a range of services that may be used to monitor and manage system performance. These services are distributed and scalable to accommodate the most complex system configurations and performance problems. Security Fix(es): A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.(CVE-2023-6917) An update for pcp is now available for openEuler-24.03-LTS. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium pcp https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2018 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2023-6917 https://nvd.nist.gov/vuln/detail/CVE-2023-6917 openEuler-24.03-LTS pcp-6.2.2-2.oe2403.aarch64.rpm pcp-conf-6.2.2-2.oe2403.aarch64.rpm pcp-debuginfo-6.2.2-2.oe2403.aarch64.rpm pcp-debugsource-6.2.2-2.oe2403.aarch64.rpm pcp-devel-6.2.2-2.oe2403.aarch64.rpm pcp-export-pcp2elasticsearch-6.2.2-2.oe2403.aarch64.rpm pcp-export-pcp2graphite-6.2.2-2.oe2403.aarch64.rpm pcp-export-pcp2influxdb-6.2.2-2.oe2403.aarch64.rpm pcp-export-pcp2json-6.2.2-2.oe2403.aarch64.rpm pcp-export-pcp2openmetrics-6.2.2-2.oe2403.aarch64.rpm pcp-export-pcp2spark-6.2.2-2.oe2403.aarch64.rpm pcp-export-pcp2xml-6.2.2-2.oe2403.aarch64.rpm pcp-export-pcp2zabbix-6.2.2-2.oe2403.aarch64.rpm pcp-export-zabbix-agent-6.2.2-2.oe2403.aarch64.rpm pcp-geolocate-6.2.2-2.oe2403.aarch64.rpm pcp-gui-6.2.2-2.oe2403.aarch64.rpm pcp-import-collectl2pcp-6.2.2-2.oe2403.aarch64.rpm pcp-import-ganglia2pcp-6.2.2-2.oe2403.aarch64.rpm pcp-import-iostat2pcp-6.2.2-2.oe2403.aarch64.rpm pcp-import-mrtg2pcp-6.2.2-2.oe2403.aarch64.rpm pcp-import-sar2pcp-6.2.2-2.oe2403.aarch64.rpm pcp-libs-6.2.2-2.oe2403.aarch64.rpm pcp-libs-devel-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-activemq-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-apache-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-bash-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-bcc-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-bind2-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-bonding-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-bpf-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-bpftrace-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-cifs-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-cisco-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-dbping-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-denki-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-dm-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-docker-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-ds389-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-ds389log-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-elasticsearch-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-farm-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-gfs2-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-gluster-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-gpfs-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-gpsd-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-hacluster-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-haproxy-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-infiniband-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-json-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-libvirt-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-lio-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-lmsensors-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-logger-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-lustre-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-lustrecomm-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-mailq-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-memcache-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-mic-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-mongodb-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-mounts-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-mysql-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-named-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-netcheck-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-netfilter-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-news-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-nfsclient-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-nginx-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-nutcracker-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-nvidia-gpu-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-openmetrics-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-openvswitch-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-oracle-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-pdns-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-perfevent-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-podman-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-postfix-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-postgresql-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-rabbitmq-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-redis-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-roomtemp-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-rsyslog-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-samba-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-sendmail-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-shping-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-slurm-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-smart-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-snmp-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-sockets-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-summary-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-systemd-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-trace-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-unbound-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-uwsgi-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-weblog-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-zimbra-6.2.2-2.oe2403.aarch64.rpm pcp-pmda-zswap-6.2.2-2.oe2403.aarch64.rpm pcp-selinux-6.2.2-2.oe2403.aarch64.rpm pcp-system-tools-6.2.2-2.oe2403.aarch64.rpm pcp-testsuite-6.2.2-2.oe2403.aarch64.rpm pcp-zeroconf-6.2.2-2.oe2403.aarch64.rpm perl-PCP-LogImport-6.2.2-2.oe2403.aarch64.rpm perl-PCP-LogSummary-6.2.2-2.oe2403.aarch64.rpm perl-PCP-MMV-6.2.2-2.oe2403.aarch64.rpm perl-PCP-PMDA-6.2.2-2.oe2403.aarch64.rpm python3-pcp-6.2.2-2.oe2403.aarch64.rpm pcp-6.2.2-2.oe2403.src.rpm pcp-6.2.2-2.oe2403.x86_64.rpm pcp-conf-6.2.2-2.oe2403.x86_64.rpm pcp-debuginfo-6.2.2-2.oe2403.x86_64.rpm pcp-debugsource-6.2.2-2.oe2403.x86_64.rpm pcp-devel-6.2.2-2.oe2403.x86_64.rpm pcp-export-pcp2elasticsearch-6.2.2-2.oe2403.x86_64.rpm pcp-export-pcp2graphite-6.2.2-2.oe2403.x86_64.rpm pcp-export-pcp2influxdb-6.2.2-2.oe2403.x86_64.rpm pcp-export-pcp2json-6.2.2-2.oe2403.x86_64.rpm pcp-export-pcp2openmetrics-6.2.2-2.oe2403.x86_64.rpm pcp-export-pcp2spark-6.2.2-2.oe2403.x86_64.rpm pcp-export-pcp2xml-6.2.2-2.oe2403.x86_64.rpm pcp-export-pcp2zabbix-6.2.2-2.oe2403.x86_64.rpm pcp-export-zabbix-agent-6.2.2-2.oe2403.x86_64.rpm pcp-geolocate-6.2.2-2.oe2403.x86_64.rpm pcp-gui-6.2.2-2.oe2403.x86_64.rpm pcp-import-collectl2pcp-6.2.2-2.oe2403.x86_64.rpm pcp-import-ganglia2pcp-6.2.2-2.oe2403.x86_64.rpm pcp-import-iostat2pcp-6.2.2-2.oe2403.x86_64.rpm pcp-import-mrtg2pcp-6.2.2-2.oe2403.x86_64.rpm pcp-import-sar2pcp-6.2.2-2.oe2403.x86_64.rpm pcp-libs-6.2.2-2.oe2403.x86_64.rpm pcp-libs-devel-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-activemq-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-apache-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-bash-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-bcc-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-bind2-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-bonding-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-bpf-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-bpftrace-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-cifs-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-cisco-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-dbping-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-denki-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-dm-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-docker-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-ds389-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-ds389log-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-elasticsearch-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-farm-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-gfs2-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-gluster-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-gpfs-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-gpsd-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-hacluster-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-haproxy-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-infiniband-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-json-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-libvirt-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-lio-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-lmsensors-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-logger-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-lustre-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-lustrecomm-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-mailq-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-memcache-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-mic-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-mongodb-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-mounts-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-mssql-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-mysql-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-named-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-netcheck-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-netfilter-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-news-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-nfsclient-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-nginx-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-nutcracker-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-nvidia-gpu-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-openmetrics-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-openvswitch-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-oracle-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-pdns-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-perfevent-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-podman-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-postfix-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-postgresql-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-rabbitmq-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-redis-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-resctrl-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-roomtemp-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-rsyslog-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-samba-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-sendmail-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-shping-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-slurm-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-smart-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-snmp-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-sockets-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-summary-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-systemd-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-trace-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-unbound-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-uwsgi-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-weblog-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-zimbra-6.2.2-2.oe2403.x86_64.rpm pcp-pmda-zswap-6.2.2-2.oe2403.x86_64.rpm pcp-selinux-6.2.2-2.oe2403.x86_64.rpm pcp-system-tools-6.2.2-2.oe2403.x86_64.rpm pcp-testsuite-6.2.2-2.oe2403.x86_64.rpm pcp-zeroconf-6.2.2-2.oe2403.x86_64.rpm perl-PCP-LogImport-6.2.2-2.oe2403.x86_64.rpm perl-PCP-LogSummary-6.2.2-2.oe2403.x86_64.rpm perl-PCP-MMV-6.2.2-2.oe2403.x86_64.rpm perl-PCP-PMDA-6.2.2-2.oe2403.x86_64.rpm python3-pcp-6.2.2-2.oe2403.x86_64.rpm pcp-help-6.2.2-2.oe2403.noarch.rpm A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation. 2024-08-23 CVE-2023-6917 openEuler-24.03-LTS Medium 6.0 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N pcp security update 2024-08-23 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2018