Red Hat Product Errata RHSA-2023:2800 - Security Advisory
Issued:
2023-05-16
Updated:
2023-05-16

RHSA-2023:2800 - Security Advisory

Synopsis

Moderate: sysstat security and bug fix update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for sysstat is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity.

Security Fix(es):

  • sysstat: arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64

Fixes

  • BZ - 2141207 - CVE-2022-39377 sysstat: arithmetic overflow in allocate_structures() on 32 bit systems

Red Hat Enterprise Linux for x86_64 8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
x86_64
sysstat-11.7.3-9.el8.x86_64.rpm SHA-256: 39bc44cc97ba705af59636740088a130e09ed7a0be2e687bfccb9d393f6fc9bf
sysstat-debuginfo-11.7.3-9.el8.x86_64.rpm SHA-256: 8e93034b6432e116f780009345a45dbee5117cf6258ab66451e78d5218083a92
sysstat-debugsource-11.7.3-9.el8.x86_64.rpm SHA-256: 438e6eb181911c3db12383c70151e005325d06dbcfff25bcfa0f4c4d37f6b52a

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
x86_64
sysstat-11.7.3-9.el8.x86_64.rpm SHA-256: 39bc44cc97ba705af59636740088a130e09ed7a0be2e687bfccb9d393f6fc9bf
sysstat-debuginfo-11.7.3-9.el8.x86_64.rpm SHA-256: 8e93034b6432e116f780009345a45dbee5117cf6258ab66451e78d5218083a92
sysstat-debugsource-11.7.3-9.el8.x86_64.rpm SHA-256: 438e6eb181911c3db12383c70151e005325d06dbcfff25bcfa0f4c4d37f6b52a

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
x86_64
sysstat-11.7.3-9.el8.x86_64.rpm SHA-256: 39bc44cc97ba705af59636740088a130e09ed7a0be2e687bfccb9d393f6fc9bf
sysstat-debuginfo-11.7.3-9.el8.x86_64.rpm SHA-256: 8e93034b6432e116f780009345a45dbee5117cf6258ab66451e78d5218083a92
sysstat-debugsource-11.7.3-9.el8.x86_64.rpm SHA-256: 438e6eb181911c3db12383c70151e005325d06dbcfff25bcfa0f4c4d37f6b52a

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
s390x
sysstat-11.7.3-9.el8.s390x.rpm SHA-256: 146d08e083b213c42b7a7ba99db1ff04050b6d145d9a51523b440c30e00cb539
sysstat-debuginfo-11.7.3-9.el8.s390x.rpm SHA-256: 6fd902760dc60b0538265b468ddf16ea591aeab00057c4888d7ea03b606bba80
sysstat-debugsource-11.7.3-9.el8.s390x.rpm SHA-256: c8ed8d081d245ef71f44548f52b22e8a258654b4bbccf1662483db4f75766046

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
s390x
sysstat-11.7.3-9.el8.s390x.rpm SHA-256: 146d08e083b213c42b7a7ba99db1ff04050b6d145d9a51523b440c30e00cb539
sysstat-debuginfo-11.7.3-9.el8.s390x.rpm SHA-256: 6fd902760dc60b0538265b468ddf16ea591aeab00057c4888d7ea03b606bba80
sysstat-debugsource-11.7.3-9.el8.s390x.rpm SHA-256: c8ed8d081d245ef71f44548f52b22e8a258654b4bbccf1662483db4f75766046

Red Hat Enterprise Linux for Power, little endian 8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
ppc64le
sysstat-11.7.3-9.el8.ppc64le.rpm SHA-256: 4df8cd0dde00eae658316887031699e8f4ae14410b7ca9e573ba08a675eaf7c9
sysstat-debuginfo-11.7.3-9.el8.ppc64le.rpm SHA-256: 88920496f66f96e67da56270786cf37a25b1791d1f1084954b3362bf8d04a3c2
sysstat-debugsource-11.7.3-9.el8.ppc64le.rpm SHA-256: 14c6254490c77acd2e5d5fe7b7628e5beeac40e41221f80d423daa829a05feb1

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
ppc64le
sysstat-11.7.3-9.el8.ppc64le.rpm SHA-256: 4df8cd0dde00eae658316887031699e8f4ae14410b7ca9e573ba08a675eaf7c9
sysstat-debuginfo-11.7.3-9.el8.ppc64le.rpm SHA-256: 88920496f66f96e67da56270786cf37a25b1791d1f1084954b3362bf8d04a3c2
sysstat-debugsource-11.7.3-9.el8.ppc64le.rpm SHA-256: 14c6254490c77acd2e5d5fe7b7628e5beeac40e41221f80d423daa829a05feb1

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
x86_64
sysstat-11.7.3-9.el8.x86_64.rpm SHA-256: 39bc44cc97ba705af59636740088a130e09ed7a0be2e687bfccb9d393f6fc9bf
sysstat-debuginfo-11.7.3-9.el8.x86_64.rpm SHA-256: 8e93034b6432e116f780009345a45dbee5117cf6258ab66451e78d5218083a92
sysstat-debugsource-11.7.3-9.el8.x86_64.rpm SHA-256: 438e6eb181911c3db12383c70151e005325d06dbcfff25bcfa0f4c4d37f6b52a

Red Hat Enterprise Linux for ARM 64 8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
aarch64
sysstat-11.7.3-9.el8.aarch64.rpm SHA-256: 7c7c0679e30a35c41da705b9c33543a7d4f1144d0319974fbee3cde0e40b3136
sysstat-debuginfo-11.7.3-9.el8.aarch64.rpm SHA-256: f1eee6fe855658f89ba4ecfef52463a3db5cb2aed7a10cb9482f19e1d3e33edd
sysstat-debugsource-11.7.3-9.el8.aarch64.rpm SHA-256: d142ac83f28243da03f39252b558a53929eb3dfd58e0fef47bad2b4a97f34edd

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
aarch64
sysstat-11.7.3-9.el8.aarch64.rpm SHA-256: 7c7c0679e30a35c41da705b9c33543a7d4f1144d0319974fbee3cde0e40b3136
sysstat-debuginfo-11.7.3-9.el8.aarch64.rpm SHA-256: f1eee6fe855658f89ba4ecfef52463a3db5cb2aed7a10cb9482f19e1d3e33edd
sysstat-debugsource-11.7.3-9.el8.aarch64.rpm SHA-256: d142ac83f28243da03f39252b558a53929eb3dfd58e0fef47bad2b4a97f34edd

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
ppc64le
sysstat-11.7.3-9.el8.ppc64le.rpm SHA-256: 4df8cd0dde00eae658316887031699e8f4ae14410b7ca9e573ba08a675eaf7c9
sysstat-debuginfo-11.7.3-9.el8.ppc64le.rpm SHA-256: 88920496f66f96e67da56270786cf37a25b1791d1f1084954b3362bf8d04a3c2
sysstat-debugsource-11.7.3-9.el8.ppc64le.rpm SHA-256: 14c6254490c77acd2e5d5fe7b7628e5beeac40e41221f80d423daa829a05feb1

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
sysstat-11.7.3-9.el8.src.rpm SHA-256: 126ea8468de4f41c454f286a0aacf053285a327ba0dee574bb512fa23328777d
x86_64
sysstat-11.7.3-9.el8.x86_64.rpm SHA-256: 39bc44cc97ba705af59636740088a130e09ed7a0be2e687bfccb9d393f6fc9bf
sysstat-debuginfo-11.7.3-9.el8.x86_64.rpm SHA-256: 8e93034b6432e116f780009345a45dbee5117cf6258ab66451e78d5218083a92
sysstat-debugsource-11.7.3-9.el8.x86_64.rpm SHA-256: 438e6eb181911c3db12383c70151e005325d06dbcfff25bcfa0f4c4d37f6b52a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.