{"id":"SUSE-SU-2019:1166-1","summary":"Security update for audit","details":"\nThis update for audit fixes the following issues:\n\nAudit on SUSE Linux Enterprise 12 SP3 was updated to 2.8.1 to bring\nnew features and bugfixes.  (bsc#1125535 FATE#326346)\n\n* Many features were added to auparse_normalize\n* cli option added to auditd and audispd for setting config dir\n* In auditd, restore the umask after creating a log file\n* Option added to auditd for skipping email verification\n\nThe full changelog can be found here: http://people.redhat.com/sgrubb/audit/ChangeLog\n\n\n- Change openldap dependency to client only (bsc#1085003)\n\nMinor security issue fixed:\n\n- CVE-2015-5186: Audit: log terminal emulator escape sequences handling (bsc#941922)\n\n","modified":"2026-02-04T03:10:43.423435Z","published":"2019-05-07T09:01:46Z","related":["CVE-2015-5186"],"upstream":["CVE-2015-5186"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191166-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1042781"},{"type":"REPORT","url":"https://bugzilla.suse.com/1085003"},{"type":"REPORT","url":"https://bugzilla.suse.com/1125535"},{"type":"REPORT","url":"https://bugzilla.suse.com/941922"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-5186"}],"affected":[{"package":{"name":"audit","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","purl":"pkg:rpm/suse/audit&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-8.3.1"}]}],"ecosystem_specific":{"binaries":[{"audit":"2.8.1-8.3.3","libaudit1-32bit":"2.8.1-8.3.1","libaudit1":"2.8.1-8.3.1","libauparse0":"2.8.1-8.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1166-1.json"}},{"package":{"name":"audit-secondary","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","purl":"pkg:rpm/suse/audit-secondary&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-8.3.3"}]}],"ecosystem_specific":{"binaries":[{"libaudit1-32bit":"2.8.1-8.3.1","libaudit1":"2.8.1-8.3.1","libauparse0":"2.8.1-8.3.1","audit":"2.8.1-8.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1166-1.json"}},{"package":{"name":"audit","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","purl":"pkg:rpm/suse/audit&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-8.3.1"}]}],"ecosystem_specific":{"binaries":[{"audit-devel":"2.8.1-8.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1166-1.json"}},{"package":{"name":"audit","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","purl":"pkg:rpm/suse/audit&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-8.3.1"}]}],"ecosystem_specific":{"binaries":[{"audit":"2.8.1-8.3.3","libaudit1-32bit":"2.8.1-8.3.1","libaudit1":"2.8.1-8.3.1","libauparse0":"2.8.1-8.3.1","audit-audispd-plugins":"2.8.1-8.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1166-1.json"}},{"package":{"name":"audit-secondary","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","purl":"pkg:rpm/suse/audit-secondary&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-8.3.3"}]}],"ecosystem_specific":{"binaries":[{"libaudit1":"2.8.1-8.3.1","libauparse0":"2.8.1-8.3.1","audit-audispd-plugins":"2.8.1-8.3.3","audit":"2.8.1-8.3.3","libaudit1-32bit":"2.8.1-8.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1166-1.json"}},{"package":{"name":"audit","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","purl":"pkg:rpm/suse/audit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-8.3.1"}]}],"ecosystem_specific":{"binaries":[{"audit":"2.8.1-8.3.3","libaudit1-32bit":"2.8.1-8.3.1","libaudit1":"2.8.1-8.3.1","libauparse0":"2.8.1-8.3.1","audit-audispd-plugins":"2.8.1-8.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1166-1.json"}},{"package":{"name":"audit-secondary","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","purl":"pkg:rpm/suse/audit-secondary&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-8.3.3"}]}],"ecosystem_specific":{"binaries":[{"libauparse0":"2.8.1-8.3.1","audit-audispd-plugins":"2.8.1-8.3.3","audit":"2.8.1-8.3.3","libaudit1-32bit":"2.8.1-8.3.1","libaudit1":"2.8.1-8.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1166-1.json"}}],"schema_version":"1.7.3"}