Stay Secure with the Latest Linux Advisories

security advisorysecurity updateinformation leak

Fedora 22 FEDORA-2015-13526: Audit Tools Security Issue Fix

This update fixes CVE-2015-5186. The issue is that ausearch/report did not escape terminal emulator sequences when interpreting untrusted data.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-13526 2015-08-14 23:23:21 -------------------------------------------------------------------------------- Name : audit Product : Fedora 22 Version : 2.4.4 Release : 1.fc22 URL : https://people.redhat.com/sgrubb/audit/ Summary : User space tools for 2.6 kernel auditing Description : The audit package contains the user space utilities for storing and searching the audit records generate by the audit subsystem in the Linux 2.6 kernel. -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2015-5186. The issue is that ausearch/report did not escape terminal emulator sequences when interpreting untrusted data. -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 13 2015 Steve Grubb 2.4.4-1 - New upstream bugfix release - Fixes CVE-2015-5186 Audit: log terminal emulator escape sequences handling * Thu Jul 16 2015 Steve Grubb 2.4.3-1 - New upstream bugfix release - Adds python3 support * Wed Jun 17 2015 Fedora Release Engineering - 2.4.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update audit' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Fedora 22 security patch aimed at fixing terminal emulation vulnerabilities in auditing frameworks to bolster system defenses.. Fedora Audit Update, Security Fix, Terminal Emulator Sequences. . Severity: Important. LinuxSecurity.com Team

Aug 19, 2015 •Important Fedora