Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Fedora 21: 2015-13471 Critical: Audit Terminal Escape Repair

fedora
Calendar Grey August 19, 2015
Dist Fedora Esm H88
Critical Fedora 21 patch resolves terminal escape management flaw in auditing module, bolstering security measures.
This update fixes CVE-2015-5186

Summary

The audit package contains the user space utilities for

storing and searching the audit records generate by

the audit subsystem in the Linux 2.6 kernel.

Update Information:

This update fixes CVE-2015-5186. The issue is that ausearch/report did not escape terminal emulator sequences when interpreting untrusted data.

Change Log

* Thu Aug 13 2015 Steve Grubb 2.4.4-1 - New upstream bugfix release - Fixes CVE-2015-5186 Audit: log terminal emulator escape sequences handling * Thu Jul 16 2015 Steve Grubb 2.4.3-1 - New upstream bugfix release - Adds python3 support * Wed Jun 17 2015 Fedora Release Engineering - 2.4.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Tue Apr 28 2015 Steve Grubb 2.4.2-1 - New upstream bugfix release * Sat Feb 21 2015 Till Maas - 2.4.1-2 - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

References

Fedora Update Notification FEDORA-2015-13471 2015-08-14 23:17:39
Name : audit Product : Fedora 21 Version : 2.4.4 Release : 1.fc21 URL : https://people.redhat.com/sgrubb/audit/ Summary : User space tools for 2.6 kernel auditing Description : The audit package contains the user space utilities for storing and searching the audit records generate by the audit subsystem in the Linux 2.6 kernel.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update audit' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: audit
Product: Fedora 21
Version: 2.4.4
Release: 1.fc21
Summary: User space tools for 2.6 kernel auditing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here