Skip to navigation

Bug Fix Advisory audit bug fix update

Advisory: RHBA-2010:0080-1
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2010-02-02
Last updated on: 2010-02-02
Affected Products: Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux AS (v. 4.8.z)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux ES (v. 4.8.z)
Red Hat Enterprise Linux WS (v. 4)

Details

Updated audit packages that fix two bugs are now available.

The audit packages contain user-space utilities for storing and searching
the audit records generated by the audit subsystem in the Linux 2.6 kernel.

These updated audit packages fix the following bugs:

* audit rules that filtered on auid or uid 4294967295 did not work
correctly due to a signed integer conversion. With this update, the string
in question is now converted to an unsigned long int, allowing rules
filtering as above to work as expected. Note: this bug only presented on
32-bit systems. (BZ#557032)

* audit rules that filtered on on a large inode number, such as one
returned by "ls -i /proc/cpuinfo", did not work correctly due to a signed
integer conversion. With this update, the string in question is now
converted to an unsigned long int, allowing rules filtering on large inode
numbers to work as expected. Note: this bug only presented on 32-bit
systems. (BZ#557035)

All audit users should upgrade to these updated audit packages, which
resolve these issues.


Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Updated packages

Red Hat Desktop (v. 4)

SRPMS:
audit-1.0.16-4.el4_8.1.src.rpm     MD5: a4e23f3661a9df6b7eee32109d3df707
 
IA-32:
audit-1.0.16-4.el4_8.1.i386.rpm     MD5: f8c2a3b1ba7912909ada15dfcf123e92
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-devel-1.0.16-4.el4_8.1.i386.rpm     MD5: 374524aa8c201d2e9448c43bf36b2e0a
 
x86_64:
audit-1.0.16-4.el4_8.1.x86_64.rpm     MD5: 61b2597dc1595a8bd9493f52b35badb6
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.x86_64.rpm     MD5: def6042ad6d00e827011eb9564b34fad
audit-libs-devel-1.0.16-4.el4_8.1.x86_64.rpm     MD5: d969d5b3745dffa818292f26bfae6f2f
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
audit-1.0.16-4.el4_8.1.src.rpm     MD5: a4e23f3661a9df6b7eee32109d3df707
 
IA-32:
audit-1.0.16-4.el4_8.1.i386.rpm     MD5: f8c2a3b1ba7912909ada15dfcf123e92
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-devel-1.0.16-4.el4_8.1.i386.rpm     MD5: 374524aa8c201d2e9448c43bf36b2e0a
 
IA-64:
audit-1.0.16-4.el4_8.1.ia64.rpm     MD5: 27f342657613acfaa076edbd140a77d4
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.ia64.rpm     MD5: 8c99bcb8891d880132398d4a0701c5df
audit-libs-devel-1.0.16-4.el4_8.1.ia64.rpm     MD5: a5602f6518b7be81fe348ecb4d733174
 
PPC:
audit-1.0.16-4.el4_8.1.ppc.rpm     MD5: 3f334818b600243efe4b953ac00f0450
audit-libs-1.0.16-4.el4_8.1.ppc.rpm     MD5: 7750017d94677f7088bfabdaf4544d06
audit-libs-1.0.16-4.el4_8.1.ppc64.rpm     MD5: 7379274bf532adf721ad81ae6a9007e1
audit-libs-devel-1.0.16-4.el4_8.1.ppc.rpm     MD5: 98a26e012ee9ccd520e5be9f7874c1e3
 
s390:
audit-1.0.16-4.el4_8.1.s390.rpm     MD5: 0c3f9d81ffe823b91b5736ce2fbb27f8
audit-libs-1.0.16-4.el4_8.1.s390.rpm     MD5: 09d0c5297d13a6b335bbb29eca9dbfc6
audit-libs-devel-1.0.16-4.el4_8.1.s390.rpm     MD5: 4205e0b749b95e8f72de5f1552bca29b
 
s390x:
audit-1.0.16-4.el4_8.1.s390x.rpm     MD5: 5ae156ec8e22a0ced6ab904df4e1adb6
audit-libs-1.0.16-4.el4_8.1.s390.rpm     MD5: 09d0c5297d13a6b335bbb29eca9dbfc6
audit-libs-1.0.16-4.el4_8.1.s390x.rpm     MD5: cb2ebd8f4b54cb4cfd089e1d45deae4b
audit-libs-devel-1.0.16-4.el4_8.1.s390x.rpm     MD5: 3f48ca1fa1e5210fc65be009850eeb6b
 
x86_64:
audit-1.0.16-4.el4_8.1.x86_64.rpm     MD5: 61b2597dc1595a8bd9493f52b35badb6
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.x86_64.rpm     MD5: def6042ad6d00e827011eb9564b34fad
audit-libs-devel-1.0.16-4.el4_8.1.x86_64.rpm     MD5: d969d5b3745dffa818292f26bfae6f2f
 
Red Hat Enterprise Linux AS (v. 4.8.z)

SRPMS:
audit-1.0.16-4.el4_8.1.src.rpm     MD5: a4e23f3661a9df6b7eee32109d3df707
 
IA-32:
audit-1.0.16-4.el4_8.1.i386.rpm     MD5: f8c2a3b1ba7912909ada15dfcf123e92
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-devel-1.0.16-4.el4_8.1.i386.rpm     MD5: 374524aa8c201d2e9448c43bf36b2e0a
 
IA-64:
audit-1.0.16-4.el4_8.1.ia64.rpm     MD5: 27f342657613acfaa076edbd140a77d4
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.ia64.rpm     MD5: 8c99bcb8891d880132398d4a0701c5df
audit-libs-devel-1.0.16-4.el4_8.1.ia64.rpm     MD5: a5602f6518b7be81fe348ecb4d733174
 
PPC:
audit-1.0.16-4.el4_8.1.ppc.rpm     MD5: 3f334818b600243efe4b953ac00f0450
audit-libs-1.0.16-4.el4_8.1.ppc.rpm     MD5: 7750017d94677f7088bfabdaf4544d06
audit-libs-1.0.16-4.el4_8.1.ppc64.rpm     MD5: 7379274bf532adf721ad81ae6a9007e1
audit-libs-devel-1.0.16-4.el4_8.1.ppc.rpm     MD5: 98a26e012ee9ccd520e5be9f7874c1e3
 
s390:
audit-1.0.16-4.el4_8.1.s390.rpm     MD5: 0c3f9d81ffe823b91b5736ce2fbb27f8
audit-libs-1.0.16-4.el4_8.1.s390.rpm     MD5: 09d0c5297d13a6b335bbb29eca9dbfc6
audit-libs-devel-1.0.16-4.el4_8.1.s390.rpm     MD5: 4205e0b749b95e8f72de5f1552bca29b
 
s390x:
audit-1.0.16-4.el4_8.1.s390x.rpm     MD5: 5ae156ec8e22a0ced6ab904df4e1adb6
audit-libs-1.0.16-4.el4_8.1.s390.rpm     MD5: 09d0c5297d13a6b335bbb29eca9dbfc6
audit-libs-1.0.16-4.el4_8.1.s390x.rpm     MD5: cb2ebd8f4b54cb4cfd089e1d45deae4b
audit-libs-devel-1.0.16-4.el4_8.1.s390x.rpm     MD5: 3f48ca1fa1e5210fc65be009850eeb6b
 
x86_64:
audit-1.0.16-4.el4_8.1.x86_64.rpm     MD5: 61b2597dc1595a8bd9493f52b35badb6
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.x86_64.rpm     MD5: def6042ad6d00e827011eb9564b34fad
audit-libs-devel-1.0.16-4.el4_8.1.x86_64.rpm     MD5: d969d5b3745dffa818292f26bfae6f2f
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
audit-1.0.16-4.el4_8.1.src.rpm     MD5: a4e23f3661a9df6b7eee32109d3df707
 
IA-32:
audit-1.0.16-4.el4_8.1.i386.rpm     MD5: f8c2a3b1ba7912909ada15dfcf123e92
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-devel-1.0.16-4.el4_8.1.i386.rpm     MD5: 374524aa8c201d2e9448c43bf36b2e0a
 
IA-64:
audit-1.0.16-4.el4_8.1.ia64.rpm     MD5: 27f342657613acfaa076edbd140a77d4
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.ia64.rpm     MD5: 8c99bcb8891d880132398d4a0701c5df
audit-libs-devel-1.0.16-4.el4_8.1.ia64.rpm     MD5: a5602f6518b7be81fe348ecb4d733174
 
x86_64:
audit-1.0.16-4.el4_8.1.x86_64.rpm     MD5: 61b2597dc1595a8bd9493f52b35badb6
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.x86_64.rpm     MD5: def6042ad6d00e827011eb9564b34fad
audit-libs-devel-1.0.16-4.el4_8.1.x86_64.rpm     MD5: d969d5b3745dffa818292f26bfae6f2f
 
Red Hat Enterprise Linux ES (v. 4.8.z)

SRPMS:
audit-1.0.16-4.el4_8.1.src.rpm     MD5: a4e23f3661a9df6b7eee32109d3df707
 
IA-32:
audit-1.0.16-4.el4_8.1.i386.rpm     MD5: f8c2a3b1ba7912909ada15dfcf123e92
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-devel-1.0.16-4.el4_8.1.i386.rpm     MD5: 374524aa8c201d2e9448c43bf36b2e0a
 
IA-64:
audit-1.0.16-4.el4_8.1.ia64.rpm     MD5: 27f342657613acfaa076edbd140a77d4
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.ia64.rpm     MD5: 8c99bcb8891d880132398d4a0701c5df
audit-libs-devel-1.0.16-4.el4_8.1.ia64.rpm     MD5: a5602f6518b7be81fe348ecb4d733174
 
x86_64:
audit-1.0.16-4.el4_8.1.x86_64.rpm     MD5: 61b2597dc1595a8bd9493f52b35badb6
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.x86_64.rpm     MD5: def6042ad6d00e827011eb9564b34fad
audit-libs-devel-1.0.16-4.el4_8.1.x86_64.rpm     MD5: d969d5b3745dffa818292f26bfae6f2f
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
audit-1.0.16-4.el4_8.1.src.rpm     MD5: a4e23f3661a9df6b7eee32109d3df707
 
IA-32:
audit-1.0.16-4.el4_8.1.i386.rpm     MD5: f8c2a3b1ba7912909ada15dfcf123e92
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-devel-1.0.16-4.el4_8.1.i386.rpm     MD5: 374524aa8c201d2e9448c43bf36b2e0a
 
IA-64:
audit-1.0.16-4.el4_8.1.ia64.rpm     MD5: 27f342657613acfaa076edbd140a77d4
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.ia64.rpm     MD5: 8c99bcb8891d880132398d4a0701c5df
audit-libs-devel-1.0.16-4.el4_8.1.ia64.rpm     MD5: a5602f6518b7be81fe348ecb4d733174
 
x86_64:
audit-1.0.16-4.el4_8.1.x86_64.rpm     MD5: 61b2597dc1595a8bd9493f52b35badb6
audit-libs-1.0.16-4.el4_8.1.i386.rpm     MD5: a42ba1ea80363c08edd6ccef1b08c154
audit-libs-1.0.16-4.el4_8.1.x86_64.rpm     MD5: def6042ad6d00e827011eb9564b34fad
audit-libs-devel-1.0.16-4.el4_8.1.x86_64.rpm     MD5: d969d5b3745dffa818292f26bfae6f2f
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

557032 - Problem with filtering based on auid
557035 - audit does not work for filtering a large inode number on i386



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/