openSUSE Severe pcp Command Injection DoS Privilege Escalation 2026-3507

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

This update for pcp fixes the following issues:

* CVE-2026-16524: command injection in `linux_sockets` PMDA via

`network.persocket.filter` (bsc#1272922).

* CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd

inheritance and missing peer credentials (bsc#1272923).

* CVE-2026-16527: missing authentication flags in pmproxy REST API

* CVE-2026-16529: integer overflow in `__pmGetPDU` leads to permanent DoS

* CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders

* CVE-2026-16531: path traversal via hostname in pmproxy logger servlet

* Command injection in `pmieconf` `write_pmiefile` via `$ ` and `-f`

* Command injection in `pmlogcp/pmlogmv` `do_link` via unsanitised filenames

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3507=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3507=1

* Development Tools Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-3507=1

zypper in -t patch SUSE-2026-3507=1

* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)

* pcp-pmda-cisco-debuginfo-6.2.0-150600.3.12.1

* pcp-pmda-roomtemp-debuginfo-6.2.0-150600.3.12.1

* pcp-pmda-trace-6.2.0-150600.3.12.1

* pcp-system-tools-6.2.0-150600.3.12.1

* pcp-pmda-mounts-6.2.0-150600.3.12.1

* pcp-debugsource-6.2.0-150600.3.12.1

* pcp-import-collectl2pcp-6.2.0-150600.3.12.1

* pcp-pmda-zimbra-debuginfo-6.2.0-150600.3.12.1

* pcp-pmda-lustrecomm-6.2.0-150600.3.12.1

* perl-PCP-LogImport-debuginfo-6.2.0-150600.3.12.1

* pcp-pmda-bind2-6.2.0-150600.3.12.1

* libpcp-devel-6.2.0-150600.3.12.1

* pcp-pmda-bash-debuginfo-6.2.0-150600.3.12.1

* libpcp_mmv1-6.2.0-150600.3.12.1

* pcp-pmda-cifs-6.2.0-150600.3.12.1

* pcp-pmda-gfs2-6.2.0-150600.3.12.1

* pcp-pmda-sendmail-debuginfo-6.2.0-150600.3.12.1

* pcp-pmda-summary-debuginfo-6.2.0-150600.3.12.1

* pcp-pmda-zimbra-6.2.0-150600.3.12.1

* pcp-pmda-summary-6.2.0-150600.3.12.1

* pcp-pmda-shping-debuginfo-6.2.0-150600.3.12.1

* pcp-devel-6.2.0-150600.3.12.1

* pcp-pmda-nvidia-gpu-6.2.0-150600.3.12.1

*

*

*

*

*

*

*

*

*

*

*

*

*

*

Get the latest Linux and open source security news straight to your inbox.