SUSE-SU-2025:0019-1

Details

This update for sysstat fixes the following issues:

CVE-2023-33204: Fixed a multiplication integer overflow in check_overflow in common.c (bsc#1211507)
CVE-2022-39377: Fixed arithmetic overflow in allocate_structures() (bsc#1205224)

Affected Packages

sysstat

SUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5

Fixed in:

12.0.2-150000.3.37.1

sysstat-isag

SUSE Linux Enterprise Module for Server Applications 15 SP6openSUSE Leap 15.6

Fixed in:

12.0.2-150000.3.37.1

References

REPORT

https://bugzilla.suse.com/1202473

REPORT

https://bugzilla.suse.com/1205224

REPORT

https://bugzilla.suse.com/1211507

WEB

https://www.suse.com/security/cve/CVE-2022-39377

WEB

https://www.suse.com/security/cve/CVE-2023-33204

ADVISORY

https://www.suse.com/support/update/announcement/2025/suse-su-20250019-1/