Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1166-1

Опубликовано: 07 мая 2019
Источник: suse-cvrf

Описание

Security update for audit

This update for audit fixes the following issues:

Audit on SUSE Linux Enterprise 12 SP3 was updated to 2.8.1 to bring new features and bugfixes. (bsc#1125535 FATE#326346)

  • Many features were added to auparse_normalize
  • cli option added to auditd and audispd for setting config dir
  • In auditd, restore the umask after creating a log file
  • Option added to auditd for skipping email verification

The full changelog can be found here: http://people.redhat.com/sgrubb/audit/ChangeLog

  • Change openldap dependency to client only (bsc#1085003)

Minor security issue fixed:

  • CVE-2015-5186: Audit: log terminal emulator escape sequences handling (bsc#941922)

Список пакетов

Container caasp/v4/nginx-ingress-controller:beta1
libaudit1-2.8.1-8.3.1
Container suse/sles12sp3:latest
libaudit1-2.8.1-8.3.1
SUSE Linux Enterprise Desktop 12 SP3
audit-2.8.1-8.3.3
libaudit1-2.8.1-8.3.1
libaudit1-32bit-2.8.1-8.3.1
libauparse0-2.8.1-8.3.1
SUSE Linux Enterprise Server 12 SP3
audit-2.8.1-8.3.3
audit-audispd-plugins-2.8.1-8.3.3
libaudit1-2.8.1-8.3.1
libaudit1-32bit-2.8.1-8.3.1
libauparse0-2.8.1-8.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
audit-2.8.1-8.3.3
audit-audispd-plugins-2.8.1-8.3.3
libaudit1-2.8.1-8.3.1
libaudit1-32bit-2.8.1-8.3.1
libauparse0-2.8.1-8.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3
audit-devel-2.8.1-8.3.1

Ссылки

Описание

Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libaudit1-2.8.1-8.3.1
Container suse/sles12sp3:latest:libaudit1-2.8.1-8.3.1
SUSE Linux Enterprise Desktop 12 SP3:audit-2.8.1-8.3.3
SUSE Linux Enterprise Desktop 12 SP3:libaudit1-2.8.1-8.3.1
Ссылки