RLSA-2026:97299: Moderate: pcp security, bug fix, and enhancement update

Published Nov 13, 2026
·
Updated

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

PCP: PCP: Remote denial of service and information leakage (CVE-2026-16530)

PCP: PCP: Arbitrary file creation via path traversal in pmproxy logger servlet (CVE-2026-16531)

Bug Fix(es) and Enhancement(s):

[Downstream] Rebase to the v7.1.3 or newer in 10.3 (JIRA:Rocky Linux-173456)

Cockpit reports "Metrics history could not be loaded" when some older pmlogger metrics are corrupted (JIRA:Rocky Linux-139714)

pcp-pmda-hdb and pcp-pmda-postgresql ship active default credentials in configuration files (JIRA:Rocky Linux-152221)

[Rocky Linux 10.2] PCP (pcp-zeroconf) now pulls a new set of additional packages that are not really required by default (JIRA:Rocky Linux-180384)

Remove legacy pcp-pmda-bcc package from Rocky Linux 10 and in favor of pcp-pmda-bpf (JIRA:Rocky Linux-188397)

Update of MSSQL PMDA to work with msodbcsql v18 (JIRA:Rocky Linux-177599)

Migrate to libvalkey from hiredis/hiredis-cluster (JIRA:Rocky Linux-108916)

pcp2openmetrics reports only the first metric when uses pmlogger archives (JIRA:Rocky Linux-114006)

pcp2opentelemetry generates output that is incompatible with OTLP/protobuf (JIRA:Rocky Linux-130463)

"opentelemetry.control.statuscode" metric does not report failing scripts (JIRA:Rocky Linux-130499)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.

Affected Software

154 affected componentsFixes available
rocky-linux/pcp-pmda-netcheck<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-pcp2zabbix<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-sendmail-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-postfix<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-trace<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-pcp2influxdb<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-redis<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/perl-pcp-logimport<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-cisco-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-gpsd<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-logger<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-rabbitmq<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-cifs-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-mailq-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-zeroconf<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-oracle<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-bpf-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-netfilter<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-pcp2spark<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-mongodb<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-sendmail<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-import-pmseries<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-devel<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-activemq<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-podman<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-perfevent<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-gluster<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-pcp2elasticsearch<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-cisco<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-sockets<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-zimbra-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/perl-pcp-mmv-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-ds389log<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-geolocate<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-logger-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-import-ganglia2pcp<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-libvirt<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-shping-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/python3-pcp-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-memcache<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-rsyslog<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-nfsclient<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-zswap<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-hacluster<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-apache<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-cifs<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/perl-pcp-mmv<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-pcp2graphite<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-import-mrtg2pcp<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-mailq<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-docker-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-libs-devel<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-lustrecomm<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-perfevent-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-bonding<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-ds389<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-testsuite-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-bpf<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-roomtemp<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-dm-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-farm<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/perl-pcp-pmda-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-podman-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-named<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-systemd-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-zabbix-agent-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-pcp2openmetrics<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-systemd<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-denki<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-libs<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-bpftrace<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-summary-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-shping<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-import-sar2pcp<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-selinux<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-testsuite<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-opentelemetry<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-trace-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/perl-pcp-pmda<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-nvidia-gpu-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-statsd<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-import-benchmarks<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-openvswitch<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-docker<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-lustre<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-pcp2json<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-denki-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-gpfs<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-lio<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-lmsensors<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-hdb<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-amdgpu-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-postgresql<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-apache-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-devel-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-amdgpu<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-slurm<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-weblog<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-mounts-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-zabbix-agent<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-snmp<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-summary<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-lustrecomm-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-nginx<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-roomtemp-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-nvidia-gpu<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-sockets-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-bash-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-unbound<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-import-collectl2pcp-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-smart-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-system-tools-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-bash<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-statsd-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-uwsgi<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-system-tools<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-mic<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/python3-pcp<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-conf<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-hacluster-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/perl-pcp-logimport-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-zimbra<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-news<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-rocestat<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-dbping<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-infiniband<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-farm-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-debugsource<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-gui<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-pcp2opentelemetry<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-elasticsearch<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-haproxy<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-weblog-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-smart<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-import-collectl2pcp<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-pdns<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-mounts<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-gui-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-bind2<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-libs-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-mysql<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-import-iostat2pcp<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-samba<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/perl-pcp-logsummary<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-export-pcp2xml<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-infiniband-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-openmetrics<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-dm<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-resctrl<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-resctrl-debuginfo<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-pmda-mssql<0:7.1.5-6.el10
0:7.1.5-6.el10
rocky-linux/pcp-doc<0:7.1.5-6.el10
0:7.1.5-6.el10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade rocky-linux/pcp-pmda-netcheck to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  2. Upgrade

    Upgrade rocky-linux/pcp-export-pcp2zabbix to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  3. Upgrade

    Upgrade rocky-linux/pcp-pmda-sendmail-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  4. Upgrade

    Upgrade rocky-linux/pcp-pmda-postfix to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  5. Upgrade

    Upgrade rocky-linux/pcp-pmda-trace to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  6. Upgrade

    Upgrade rocky-linux/pcp-export-pcp2influxdb to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  7. Upgrade

    Upgrade rocky-linux/pcp-pmda-redis to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  8. Upgrade

    Upgrade rocky-linux/perl-PCP-LogImport to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  9. Upgrade

    Upgrade rocky-linux/pcp-pmda-cisco-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  10. Upgrade

    Upgrade rocky-linux/pcp-pmda-gpsd to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  11. Upgrade

    Upgrade rocky-linux/pcp-pmda-logger to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  12. Upgrade

    Upgrade rocky-linux/pcp-pmda-rabbitmq to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  13. Upgrade

    Upgrade rocky-linux/pcp-pmda-cifs-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  14. Upgrade

    Upgrade rocky-linux/pcp-pmda-mailq-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  15. Upgrade

    Upgrade rocky-linux/pcp-zeroconf to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  16. Upgrade

    Upgrade rocky-linux/pcp-pmda-oracle to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  17. Upgrade

    Upgrade rocky-linux/pcp-pmda-bpf-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  18. Upgrade

    Upgrade rocky-linux/pcp-pmda-netfilter to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  19. Upgrade

    Upgrade rocky-linux/pcp-export-pcp2spark to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  20. Upgrade

    Upgrade rocky-linux/pcp-pmda-mongodb to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  21. Upgrade

    Upgrade rocky-linux/pcp-pmda-sendmail to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  22. Upgrade

    Upgrade rocky-linux/pcp-import-pmseries to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  23. Upgrade

    Upgrade rocky-linux/pcp-devel to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  24. Upgrade

    Upgrade rocky-linux/pcp-pmda-activemq to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  25. Upgrade

    Upgrade rocky-linux/pcp-pmda-podman to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  26. Upgrade

    Upgrade rocky-linux/pcp-pmda-perfevent to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  27. Upgrade

    Upgrade rocky-linux/pcp-pmda-gluster to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  28. Upgrade

    Upgrade rocky-linux/pcp-export-pcp2elasticsearch to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  29. Upgrade

    Upgrade rocky-linux/pcp-pmda-cisco to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  30. Upgrade

    Upgrade rocky-linux/pcp-pmda-sockets to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  31. Upgrade

    Upgrade rocky-linux/pcp-pmda-zimbra-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  32. Upgrade

    Upgrade rocky-linux/perl-PCP-MMV-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  33. Upgrade

    Upgrade rocky-linux/pcp-pmda-ds389log to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  34. Upgrade

    Upgrade rocky-linux/pcp-geolocate to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  35. Upgrade

    Upgrade rocky-linux/pcp-pmda-logger-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  36. Upgrade

    Upgrade rocky-linux/pcp-import-ganglia2pcp to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  37. Upgrade

    Upgrade rocky-linux/pcp-pmda-libvirt to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  38. Upgrade

    Upgrade rocky-linux/pcp-pmda-shping-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  39. Upgrade

    Upgrade rocky-linux/python3-pcp-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  40. Upgrade

    Upgrade rocky-linux/pcp-pmda-memcache to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  41. Upgrade

    Upgrade rocky-linux/pcp-pmda-rsyslog to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  42. Upgrade

    Upgrade rocky-linux/pcp-pmda-nfsclient to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  43. Upgrade

    Upgrade rocky-linux/pcp-pmda-zswap to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  44. Upgrade

    Upgrade rocky-linux/pcp-pmda-hacluster to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  45. Upgrade

    Upgrade rocky-linux/pcp-pmda-apache to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  46. Upgrade

    Upgrade rocky-linux/pcp-pmda-cifs to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  47. Upgrade

    Upgrade rocky-linux/perl-PCP-MMV to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  48. Upgrade

    Upgrade rocky-linux/pcp-export-pcp2graphite to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  49. Upgrade

    Upgrade rocky-linux/pcp-import-mrtg2pcp to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  50. Upgrade

    Upgrade rocky-linux/pcp-pmda-mailq to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  51. Upgrade

    Upgrade rocky-linux/pcp-pmda-docker-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  52. Upgrade

    Upgrade rocky-linux/pcp-libs-devel to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  53. Upgrade

    Upgrade rocky-linux/pcp-pmda-lustrecomm to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  54. Upgrade

    Upgrade rocky-linux/pcp-pmda-perfevent-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  55. Upgrade

    Upgrade rocky-linux/pcp-pmda-bonding to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  56. Upgrade

    Upgrade rocky-linux/pcp-pmda-ds389 to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  57. Upgrade

    Upgrade rocky-linux/pcp-testsuite-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  58. Upgrade

    Upgrade rocky-linux/pcp-pmda-bpf to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  59. Upgrade

    Upgrade rocky-linux/pcp-pmda-roomtemp to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  60. Upgrade

    Upgrade rocky-linux/pcp-pmda-dm-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  61. Upgrade

    Upgrade rocky-linux/pcp-pmda-farm to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  62. Upgrade

    Upgrade rocky-linux/perl-PCP-PMDA-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  63. Upgrade

    Upgrade rocky-linux/pcp-pmda-podman-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  64. Upgrade

    Upgrade rocky-linux/pcp-pmda-named to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  65. Upgrade

    Upgrade rocky-linux/pcp-pmda-systemd-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  66. Upgrade

    Upgrade rocky-linux/pcp-export-zabbix-agent-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  67. Upgrade

    Upgrade rocky-linux/pcp-export-pcp2openmetrics to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  68. Upgrade

    Upgrade rocky-linux/pcp-pmda-systemd to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  69. Upgrade

    Upgrade rocky-linux/pcp-pmda-denki to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  70. Upgrade

    Upgrade rocky-linux/pcp-libs to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  71. Upgrade

    Upgrade rocky-linux/pcp-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  72. Upgrade

    Upgrade rocky-linux/pcp-pmda-bpftrace to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  73. Upgrade

    Upgrade rocky-linux/pcp-pmda-summary-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  74. Upgrade

    Upgrade rocky-linux/pcp-pmda-shping to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  75. Upgrade

    Upgrade rocky-linux/pcp-import-sar2pcp to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  76. Upgrade

    Upgrade rocky-linux/pcp-selinux to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  77. Upgrade

    Upgrade rocky-linux/pcp-testsuite to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  78. Upgrade

    Upgrade rocky-linux/pcp-pmda-opentelemetry to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  79. Upgrade

    Upgrade rocky-linux/pcp-pmda-trace-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  80. Upgrade

    Upgrade rocky-linux/perl-PCP-PMDA to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  81. Upgrade

    Upgrade rocky-linux/pcp-pmda-nvidia-gpu-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  82. Upgrade

    Upgrade rocky-linux/pcp-pmda-statsd to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  83. Upgrade

    Upgrade rocky-linux/pcp-import-benchmarks to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  84. Upgrade

    Upgrade rocky-linux/pcp-pmda-openvswitch to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  85. Upgrade

    Upgrade rocky-linux/pcp-pmda-docker to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  86. Upgrade

    Upgrade rocky-linux/pcp-pmda-lustre to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  87. Upgrade

    Upgrade rocky-linux/pcp-export-pcp2json to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  88. Upgrade

    Upgrade rocky-linux/pcp-pmda-denki-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  89. Upgrade

    Upgrade rocky-linux/pcp-pmda-gpfs to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  90. Upgrade

    Upgrade rocky-linux/pcp-pmda-lio to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  91. Upgrade

    Upgrade rocky-linux/pcp-pmda-lmsensors to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  92. Upgrade

    Upgrade rocky-linux/pcp-pmda-hdb to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  93. Upgrade

    Upgrade rocky-linux/pcp-pmda-amdgpu-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  94. Upgrade

    Upgrade rocky-linux/pcp-pmda-postgresql to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  95. Upgrade

    Upgrade rocky-linux/pcp-pmda-apache-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  96. Upgrade

    Upgrade rocky-linux/pcp-devel-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  97. Upgrade

    Upgrade rocky-linux/pcp-pmda-amdgpu to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  98. Upgrade

    Upgrade rocky-linux/pcp-pmda-slurm to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  99. Upgrade

    Upgrade rocky-linux/pcp-pmda-weblog to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  100. Upgrade

    Upgrade rocky-linux/pcp-pmda-mounts-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  101. Upgrade

    Upgrade rocky-linux/pcp-export-zabbix-agent to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  102. Upgrade

    Upgrade rocky-linux/pcp-pmda-snmp to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  103. Upgrade

    Upgrade rocky-linux/pcp-pmda-summary to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  104. Upgrade

    Upgrade rocky-linux/pcp-pmda-lustrecomm-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  105. Upgrade

    Upgrade rocky-linux/pcp-pmda-nginx to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  106. Upgrade

    Upgrade rocky-linux/pcp-pmda-roomtemp-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  107. Upgrade

    Upgrade rocky-linux/pcp-pmda-nvidia-gpu to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  108. Upgrade

    Upgrade rocky-linux/pcp-pmda-sockets-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  109. Upgrade

    Upgrade rocky-linux/pcp-pmda-bash-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  110. Upgrade

    Upgrade rocky-linux/pcp-pmda-unbound to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  111. Upgrade

    Upgrade rocky-linux/pcp-import-collectl2pcp-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  112. Upgrade

    Upgrade rocky-linux/pcp-pmda-smart-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  113. Upgrade

    Upgrade rocky-linux/pcp-system-tools-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  114. Upgrade

    Upgrade rocky-linux/pcp-pmda-bash to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  115. Upgrade

    Upgrade rocky-linux/pcp-pmda-statsd-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  116. Upgrade

    Upgrade rocky-linux/pcp-pmda-uwsgi to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  117. Upgrade

    Upgrade rocky-linux/pcp-system-tools to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  118. Upgrade

    Upgrade rocky-linux/pcp-pmda-mic to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  119. Upgrade

    Upgrade rocky-linux/python3-pcp to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  120. Upgrade

    Upgrade rocky-linux/pcp-conf to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  121. Upgrade

    Upgrade rocky-linux/pcp-pmda-hacluster-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  122. Upgrade

    Upgrade rocky-linux/perl-PCP-LogImport-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  123. Upgrade

    Upgrade rocky-linux/pcp-pmda-zimbra to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  124. Upgrade

    Upgrade rocky-linux/pcp-pmda-news to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  125. Upgrade

    Upgrade rocky-linux/pcp-pmda-rocestat to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  126. Upgrade

    Upgrade rocky-linux/pcp-pmda-dbping to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  127. Upgrade

    Upgrade rocky-linux/pcp-pmda-infiniband to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  128. Upgrade

    Upgrade rocky-linux/pcp-pmda-farm-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  129. Upgrade

    Upgrade rocky-linux/pcp-debugsource to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  130. Upgrade

    Upgrade rocky-linux/pcp-gui to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  131. Upgrade

    Upgrade rocky-linux/pcp-export-pcp2opentelemetry to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  132. Upgrade

    Upgrade rocky-linux/pcp-pmda-elasticsearch to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  133. Upgrade

    Upgrade rocky-linux/pcp-pmda-haproxy to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  134. Upgrade

    Upgrade rocky-linux/pcp to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  135. Upgrade

    Upgrade rocky-linux/pcp-pmda-weblog-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  136. Upgrade

    Upgrade rocky-linux/pcp-pmda-smart to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  137. Upgrade

    Upgrade rocky-linux/pcp-import-collectl2pcp to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  138. Upgrade

    Upgrade rocky-linux/pcp-pmda-pdns to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  139. Upgrade

    Upgrade rocky-linux/pcp-pmda-mounts to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  140. Upgrade

    Upgrade rocky-linux/pcp-gui-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  141. Upgrade

    Upgrade rocky-linux/pcp-pmda-bind2 to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  142. Upgrade

    Upgrade rocky-linux/pcp-libs-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  143. Upgrade

    Upgrade rocky-linux/pcp-pmda-mysql to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  144. Upgrade

    Upgrade rocky-linux/pcp-import-iostat2pcp to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  145. Upgrade

    Upgrade rocky-linux/pcp-pmda-samba to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  146. Upgrade

    Upgrade rocky-linux/perl-PCP-LogSummary to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  147. Upgrade

    Upgrade rocky-linux/pcp-export-pcp2xml to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  148. Upgrade

    Upgrade rocky-linux/pcp-pmda-infiniband-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  149. Upgrade

    Upgrade rocky-linux/pcp-pmda-openmetrics to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  150. Upgrade

    Upgrade rocky-linux/pcp-pmda-dm to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  151. Upgrade

    Upgrade rocky-linux/pcp-pmda-resctrl to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  152. Upgrade

    Upgrade rocky-linux/pcp-pmda-resctrl-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  153. Upgrade

    Upgrade rocky-linux/pcp-pmda-mssql to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  154. Upgrade

    Upgrade rocky-linux/pcp-doc to a version that resolves this vulnerability.

    Fixed in 0:7.1.5-6.el10
  155. Upgrade

    Upgrade pcp to a version that resolves this vulnerability.

    Fixed in v7.1.3
  156. Remove

    Remove pcp-pmda-bcc from your environment.

    Remove the legacy pcp-pmda-bcc package from Rocky Linux 10 in favor of pcp-pmda-bpf.

Event History

Nov 13, 2026
Advisory Published
via OSV·06:06 AM
Data Sourced
via OSV·06:06 AM
DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

Which component is implicated in the path traversal issue?

The path traversal issue is in the pmproxy logger servlet and can allow arbitrary file creation.

2

What other security impact is addressed by this advisory?

The advisory also addresses a PCP vulnerability that can cause remote denial of service and information leakage.

3

Are configuration credentials mentioned in the fixes?

Yes. The update addresses active default credentials shipped in configuration files for pcp-pmda-hdb and pcp-pmda-postgresql.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203