Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Fedora 22 FEDORA-2015-13526: Audit Tools Security Issue Fix

fedora
Calendar Grey August 19, 2015
Dist Fedora Esm H88
Fedora 22 security patch aimed at fixing terminal emulation vulnerabilities in auditing frameworks to bolster system defenses.
This update fixes CVE-2015-5186

Summary

The audit package contains the user space utilities for

storing and searching the audit records generate by

the audit subsystem in the Linux 2.6 kernel.

Update Information:

This update fixes CVE-2015-5186. The issue is that ausearch/report did not escape terminal emulator sequences when interpreting untrusted data.

Change Log

* Thu Aug 13 2015 Steve Grubb 2.4.4-1 - New upstream bugfix release - Fixes CVE-2015-5186 Audit: log terminal emulator escape sequences handling * Thu Jul 16 2015 Steve Grubb 2.4.3-1 - New upstream bugfix release - Adds python3 support * Wed Jun 17 2015 Fedora Release Engineering - 2.4.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

References

Fedora Update Notification FEDORA-2015-13526 2015-08-14 23:23:21
Name : audit Product : Fedora 22 Version : 2.4.4 Release : 1.fc22 URL : https://people.redhat.com/sgrubb/audit/ Summary : User space tools for 2.6 kernel auditing Description : The audit package contains the user space utilities for storing and searching the audit records generate by the audit subsystem in the Linux 2.6 kernel.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update audit' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: audit
Product: Fedora 22
Version: 2.4.4
Release: 1.fc22
Summary: User space tools for 2.6 kernel auditing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here