Ubuntu Security Notice USN-5748-1
November 29, 2022
sysstat vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 22.10
– Ubuntu 22.04 LTS
– Ubuntu 20.04 LTS
– Ubuntu 18.04 LTS
Summary:
Sysstat could be made to crash or run programs if it processed specially
crafted data.
Software Description:
– sysstat: system performance tools for Linux
Details:
It was discovered that Sysstat incorrectly handled certain arithmetic
multiplications. An attacker could use this issue to cause Sysstat to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
isag 12.5.6-1ubuntu0.1
sysstat 12.5.6-1ubuntu0.1
Ubuntu 22.04 LTS:
isag 12.5.2-2ubuntu0.1
sysstat 12.5.2-2ubuntu0.1
Ubuntu 20.04 LTS:
isag 12.2.0-2ubuntu0.2
sysstat 12.2.0-2ubuntu0.2
Ubuntu 18.04 LTS:
isag 11.6.1-1ubuntu0.2
sysstat 11.6.1-1ubuntu0.2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5748-1
CVE-2022-39377
Package Information:
https://launchpad.net/ubuntu/+source/sysstat/12.5.6-1ubuntu0.1
https://launchpad.net/ubuntu/+source/sysstat/12.5.2-2ubuntu0.1
https://launchpad.net/ubuntu/+source/sysstat/12.2.0-2ubuntu0.2
https://launchpad.net/ubuntu/+source/sysstat/11.6.1-1ubuntu0.2
