SUSE-SU-2019:0563-1

    Dashboard / Vulnerabilities / SUSE-SU-2019:0563-1

    SUSE-SU-2019:0563-1

    Published: 6 Mar 2019Last Modified: 4 Feb 2026
    Upstream:
    CVE-2015-5186
    Aliases:
    CVE-2015-5186

    Summary: Security update for audit

    Details: This update for audit fixes the following issues: Audit on SUSE Linux Enterprise 12 SP4 was updated to 2.8.1 to bring new features and bugfixes. (bsc#1125535 FATE#326346) * Many features were added to auparse_normalize * cli option added to auditd and audispd for setting config dir * In auditd, restore the umask after creating a log file * Option added to auditd for skipping email verification The full changelog can be found here: http://people.redhat.com/sgrubb/audit/ChangeLog - Change openldap dependency to client only (bsc#1085003) Minor security issue fixed: - CVE-2015-5186: Audit: log terminal emulator escape sequences handling (bsc#941922)

    References: https://www.suse.com/support/update/announcement/2019/suse-su-20190563-1/, https://bugzilla.suse.com/1042781, https://bugzilla.suse.com/1085003, https://bugzilla.suse.com/1125535, https://bugzilla.suse.com/941922, https://www.suse.com/security/cve/CVE-2015-5186

    Affected packages

    Package

    Name: audit

    Purl: pkg:rpm/suse/audit&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.8.1-10.3.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High