Security update for audit SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1166-1 Final 1 1 2019-05-07T09:01:46Z current 2019-05-07T09:01:46Z 2019-05-07T09:01:46Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for audit This update for audit fixes the following issues: Audit on SUSE Linux Enterprise 12 SP3 was updated to 2.8.1 to bring new features and bugfixes. (bsc#1125535 FATE#326346) * Many features were added to auparse_normalize * cli option added to auditd and audispd for setting config dir * In auditd, restore the umask after creating a log file * Option added to auditd for skipping email verification The full changelog can be found here: http://people.redhat.com/sgrubb/audit/ChangeLog - Change openldap dependency to client only (bsc#1085003) Minor security issue fixed: - CVE-2015-5186: Audit: log terminal emulator escape sequences handling (bsc#941922) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/nginx-ingress-controller:beta1-2019-1166,Container suse/sles12sp3:latest-2019-1166,SUSE-2019-1166,SUSE-SLE-DESKTOP-12-SP3-2019-1166,SUSE-SLE-SDK-12-SP3-2019-1166,SUSE-SLE-SERVER-12-SP3-2019-1166 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191166-1/ Link for SUSE-SU-2019:1166-1 https://lists.suse.com/pipermail/sle-security-updates/2019-May/005428.html E-Mail link for SUSE-SU-2019:1166-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1042781 SUSE Bug 1042781 https://bugzilla.suse.com/1085003 SUSE Bug 1085003 https://bugzilla.suse.com/1125535 SUSE Bug 1125535 https://bugzilla.suse.com/941922 SUSE Bug 941922 https://www.suse.com/security/cve/CVE-2015-5186/ SUSE CVE CVE-2015-5186 page Container caasp/v4/nginx-ingress-controller:beta1 Container suse/sles12sp3:latest SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 libaudit1-2.8.1-8.3.1 audit-2.8.1-8.3.3 audit-audispd-plugins-2.8.1-8.3.3 audit-devel-2.8.1-8.3.1 audit-devel-32bit-2.8.1-8.3.1 audit-devel-64bit-2.8.1-8.3.1 libaudit1-32bit-2.8.1-8.3.1 libaudit1-64bit-2.8.1-8.3.1 libauparse0-2.8.1-8.3.1 libauparse0-32bit-2.8.1-8.3.1 libauparse0-64bit-2.8.1-8.3.1 python2-audit-2.8.1-8.3.3 python3-audit-2.8.1-8.3.3 libaudit1-2.8.1-8.3.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libaudit1-2.8.1-8.3.1 as a component of Container suse/sles12sp3:latest audit-2.8.1-8.3.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 libaudit1-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libaudit1-32bit-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libauparse0-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 audit-2.8.1-8.3.3 as a component of SUSE Linux Enterprise Server 12 SP3 audit-audispd-plugins-2.8.1-8.3.3 as a component of SUSE Linux Enterprise Server 12 SP3 libaudit1-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 libaudit1-32bit-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 libauparse0-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 audit-2.8.1-8.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 audit-audispd-plugins-2.8.1-8.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libaudit1-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libaudit1-32bit-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libauparse0-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 audit-devel-2.8.1-8.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 Audit before 2.4.4 in Linux does not sanitize escape characters in filenames. CVE-2015-5186 Container caasp/v4/nginx-ingress-controller:beta1:libaudit1-2.8.1-8.3.1 Container suse/sles12sp3:latest:libaudit1-2.8.1-8.3.1 SUSE Linux Enterprise Desktop 12 SP3:audit-2.8.1-8.3.3 SUSE Linux Enterprise Desktop 12 SP3:libaudit1-2.8.1-8.3.1 SUSE Linux Enterprise Desktop 12 SP3:libaudit1-32bit-2.8.1-8.3.1 SUSE Linux Enterprise Desktop 12 SP3:libauparse0-2.8.1-8.3.1 SUSE Linux Enterprise Server 12 SP3:audit-2.8.1-8.3.3 SUSE Linux Enterprise Server 12 SP3:audit-audispd-plugins-2.8.1-8.3.3 SUSE Linux Enterprise Server 12 SP3:libaudit1-2.8.1-8.3.1 SUSE Linux Enterprise Server 12 SP3:libaudit1-32bit-2.8.1-8.3.1 SUSE Linux Enterprise Server 12 SP3:libauparse0-2.8.1-8.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:audit-2.8.1-8.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:audit-audispd-plugins-2.8.1-8.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libaudit1-2.8.1-8.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libaudit1-32bit-2.8.1-8.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libauparse0-2.8.1-8.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:audit-devel-2.8.1-8.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191166-1/ https://www.suse.com/security/cve/CVE-2015-5186.html CVE-2015-5186 https://bugzilla.suse.com/941922 SUSE Bug 941922