Red Hat Product Errata RHSA-2026:55617 - Security Advisory Issued: 2026-08-17 Updated: 2026-08-17 RHSA-2026:55617 - Security Advisory Overview Updated Packages Synopsis Important: pcp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for pcp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524) PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526) PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules (CVE-2026-16527) PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2506023 - CVE-2026-16524 PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection BZ - 2506026 - CVE-2026-16526 PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability BZ - 2506031 - CVE-2026-16527 PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules BZ - 2506032 - CVE-2026-16529 PCP: PCP: Denial of Service due to signed integer overflow CVEs CVE-2026-16524 CVE-2026-16526 CVE-2026-16527 CVE-2026-16529 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM pcp-7.0.3-5.el10_2.src.rpm SHA-256: 970e920b73afdfbe88d4f3bd8a4aa13a7001a1af86da81d9002721aa9687b1cb x86_64 pcp-7.0.3-5.el10_2.x86_64.rpm SHA-256: 9e2eed392446b9bf751085e235beae2666691d72a37ef1ff10e8f680f97bb9eb pcp-conf-7.0.3-5.el10_2.x86_64.rpm SHA-256: a7ae03f14144578ae11d8de3525ce526a4a87abb14774b140e6a20dbdf39418c pcp-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: 363cba54709ded06659d52eacccc0eb3474d98780707602cc57b4aa0b057876f pcp-debugsource-7.0.3-5.el10_2.x86_64.rpm SHA-256: 9bf9805753aacf86871adb91d222c36e88a5c06dfa646e3707bb17973c34397e pcp-devel-7.0.3-5.el10_2.x86_64.rpm SHA-256: c2c25a841ef09ef00056464eabfbe760cc0eb2a43dde434693147ec97f3d2079 pcp-devel-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: d4d438ad5e88e2be36a122b9223bea9beb7e12f3f1d2d120b13e572f3cb3d6f8 pcp-doc-7.0.3-5.el10_2.noarch.rpm SHA-256: 667b1381f1e3c3360d750ef4861d614fe78fa3c8a111a30097e0c2f161d23b49 pcp-export-pcp2elasticsearch-7.0.3-5.el10_2.x86_64.rpm SHA-256: 0b9d55199f3bfbc636e3ebdd9abe36abc208fbd6180632095807a890f7284363 pcp-export-pcp2graphite-7.0.3-5.el10_2.x86_64.rpm SHA-256: ef50b0c51c515c56c61925b615e495636397713f2ed90d20fe039407612bad22 pcp-export-pcp2influxdb-7.0.3-5.el10_2.x86_64.rpm SHA-256: 23f1b650efca20776f84518ee9a1a5609856c0d0727a5294679e8a2fa98b1275 pcp-export-pcp2json-7.0.3-5.el10_2.x86_64.rpm SHA-256: c74a5e4765dcee8d5bac7507e64a6e7b5e1620be0e2ba0d87be489d01453fdc5 pcp-export-pcp2openmetrics-7.0.3-5.el10_2.x86_64.rpm SHA-256: bcf9bee81b2d1dc8f08eb37a1a3e3a6dec75862aa3fb1bd02a9899f06fc10da9 pcp-export-pcp2opentelemetry-7.0.3-5.el10_2.x86_64.rpm SHA-256: 68690649f0cceddc2a39baf3cb4ae3fe72a47e18a98557e824848ec3d1f0e442 pcp-export-pcp2spark-7.0.3-5.el10_2.x86_64.rpm SHA-256: ffad9a3188432856fae784f4734fe9a18fb0cc1685ba1cac0014444c1de5130b pcp-export-pcp2xml-7.0.3-5.el10_2.x86_64.rpm SHA-256: 8c69ec2a8c0704f7c6a1d5cf151868cc643c8f06f68fdb3aeb2cd2265546d6af pcp-export-pcp2zabbix-7.0.3-5.el10_2.x86_64.rpm SHA-256: 9fcf7ee1b1154155d35cc0e5848f5c64c2f955b3e910fc28b06e89d9237327f6 pcp-export-zabbix-agent-7.0.3-5.el10_2.x86_64.rpm SHA-256: 3c25e901ddd7d1e77ed7363942447d22f8443a7c88c68c6ddc7de69d5a5586db pcp-export-zabbix-agent-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: 8060733b96991d73f886ffad346484c2e8cccaf34f3d8332be8b4fac819eb3aa pcp-geolocate-7.0.3-5.el10_2.x86_64.rpm SHA-256: 30176d244421964e5e0c28c507839a5e18104e868ce91606ef5726b60c251d9d pcp-gui-7.0.3-5.el10_2.x86_64.rpm SHA-256: f9c56641a9756d8462d88fb0d725620b2a874f3507f6e4de0ee78e554a300e1e pcp-gui-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: f216899723a93e9c960a9fff68e82513b886427eeec488c631fc28985b1a6a0e pcp-import-benchmarks-7.0.3-5.el10_2.x86_64.rpm SHA-256: c864ab1b5d6c4dbb7bd04169495a0cf805a6772cecbf972b91fae713bdae530d pcp-import-collectl2pcp-7.0.3-5.el10_2.x86_64.rpm SHA-256: a9a90d339b5aad5027578b16e1ab9250436ccf37f230b5e43fa8c7b382acba17 pcp-import-collectl2pcp-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: 10f4804e9d33d30f068f7e62e2ffc17aa09c5d8cfe7cb62526e49344127d17c4 pcp-import-ganglia2pcp-7.0.3-5.el10_2.x86_64.rpm SHA-256: 41dc86e89188fa63964872313cbfb5d154453ce861bc0d0d69aaa9e69e871249 pcp-import-iostat2pcp-7.0.3-5.el10_2.x86_64.rpm SHA-256: 237e4430f08fc0a490217d41702b9e99bf464015b12a5614fec220be1807c2c3 pcp-import-mrtg2pcp-7.0.3-5.el10_2.x86_64.rpm SHA-256: edda89664e81066535b1bcb606aa454558ba096d29e6c65e77e6750276d6bf44 pcp-import-pmseries-7.0.3-5.el10_2.x86_64.rpm SHA-256: ae60c1af7d0eac2db90f0d7eba399eded112439ca29141ecab98a752c7a78b34 pcp-import-sar2pcp-7.0.3-5.el10_2.x86_64.rpm SHA-256: e4b7b05ccbe0c38e1261fbb3f82acb0d5b9adfbc541b501cb99614751f667afa pcp-libs-7.0.3-5.el10_2.x86_64.rpm SHA-256: 384e36694462147f9f566f492ec0ce829bb5fe9c1702932cec4a21862b437406 pcp-libs-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: e87e38acfe3012670de766de44d81e2a51f5ad041ad3f7e48a9dcdc4f8546fbe pcp-libs-devel-7.0.3-5.el10_2.x86_64.rpm SHA-256: 92eab58e685763a8e5fffc7a19d21a850fc10e12b67f90dfbd3536e244498cd7 pcp-pmda-activemq-7.0.3-5.el10_2.x86_64.rpm SHA-256: 62c928d2cd65e73f9cfded238f12e6d9cf15021f8ad8df52657289735dcdc064 pcp-pmda-amdgpu-7.0.3-5.el10_2.x86_64.rpm SHA-256: 09f55d97fe6c128d282c60c54ec99e479e09a401199e8b64ffbeb1cd457c8e8b pcp-pmda-amdgpu-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: 5b7933d64329f72f67b5c96c2981fe9e27d6118569ec46edce650bd63e7b85f2 pcp-pmda-apache-7.0.3-5.el10_2.x86_64.rpm SHA-256: f9651c827feba596acaed99c0daec024d15e6ddadf29864a1be740989ed66512 pcp-pmda-apache-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: 7871a24ea5d786943b3ebb4e3c21393b9f807cd79d400fcdb465bcd58628f2a0 pcp-pmda-bash-7.0.3-5.el10_2.x86_64.rpm SHA-256: 8a696ecc4b7980f58d6191408149552d8d7a387f52db3f788b36e022bc352bf1 pcp-pmda-bash-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: 4cd3e50ca405b903cc46fe6234c640491881570cc25cd4a506674742008d0803 pcp-pmda-bcc-7.0.3-5.el10_2.x86_64.rpm SHA-256: a6c640e25cc8bb0e1c70f527feea26c772b78464c496372337c25e32bc25d75e pcp-pmda-bind2-7.0.3-5.el10_2.x86_64.rpm SHA-256: af112451a5cd8074561e4c0db9594d8e5536a5e5ecc53cadb4375dd386f8767d pcp-pmda-bonding-7.0.3-5.el10_2.x86_64.rpm SHA-256: 1bb8df75d4d6e5e939e1641998c617f4a51b81a57ece2e3119ba74629b23a5f8 pcp-pmda-bpf-7.0.3-5.el10_2.x86_64.rpm SHA-256: 18327605c293b83952f0b27ca9f9371032ac764174c29c76778299f6e3c974f9 pcp-pmda-bpf-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: 029a0af201455fab2ed040e87214ca13377af2f5cbdbc901c837522e5adafd9d pcp-pmda-bpftrace-7.0.3-5.el10_2.x86_64.rpm SHA-256: f480eee9c4defa27fab446d22723ca3061a88906655aa6425c0f03a58ca1cd6c pcp-pmda-cifs-7.0.3-5.el10_2.x86_64.rpm SHA-256: 187ef01119be100b760c24c16cd8d7db277310d58de636bb22dcd508f8356b4a pcp-pmda-cifs-debuginfo-7.0.3-5.el10_2.x86_64.rpm SHA-256: d67e67fec85ec9da964191e301b0f531c1a12c28a91f459b862d2c7a4b7bf8fb pcp-pmda-cisco-7.0.3-5.el10_2.x86_64.rpm SHA-256: 497e477ce2f8e2d9f64c2eeda9fbe43f05aa70576570d5ac090a590032ef2dce pcp