Skip to navigation

Bug Fix Advisory audit bug fix and enhancement update

Advisory: RHBA-2011:0653-1
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2011-05-19
Last updated on: 2011-05-19
Affected Products: Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Workstation (v. 6)

Details

Updated audit packages that fix bugs and provide enhancements are now available
for Red Hat Enterprise Linux 6.

The audit packages contain the user space utilities for storing and searching
the audit records which have been generated by the audit subsystem in the Linux
2.6 kernel.

This update fixes the following bugs:

* System processes — that is processes with an audit id (auid) of -1 — are
logged by the audit subsystem. However, if the ausearch utility was used to
locate events where the auid was -1, it would display all events. In this
update, under these circumstances, ausearch only returns events with an auid of
-1. (BZ#670938)

* A value of 'syslog' for the 'disk_error_action' parameter in 'auditd.conf'
instructs auditd to issue a warning to syslog if an error is encountered when
writing audit events to disk. If 'disk_error_action' was set to 'syslog', auditd
always attempted to exec() a child process. Consequently, if a disk error was
encountered (ie. a disk full error), auditd would attempt to exec() a null child
process, and logging would not resume after the disk error was reported to
syslog. In this update the child process is not called when the 'syslog' option
is used, and logging continues as expected. (BZ#688664)

* Previously if an audispd plug-in was restarted, the plug-in was not marked as
active. Consequently, the remote logging plug-in (audisp-remote) was unable to
bind to a privileged port on reconnect because all privileges had been dropped.
In these updated packages, audispd plug-ins are marked as active after being
restarted, and the audisp-remote plug-in functions as expected. (BZ#695605)

* Previously, the "autrace -r" command on the IBM System z architecture
attempted to audit network syscalls not available on IBM System z. Consequently,
an error similar to the following might have been returned:

Error inserting audit rule for pid=13163

With this update, "autrace -r" is now aware of system calls not available on
this architecture, which resolves this issue. (BZ#697463)

* When an ignore directive was included in an audit.rules configuration file,
the auditctl utility became unresponsive when attempting to load those rules.
With this update, the issue is resolved. (BZ#640948)

* Previously, the audit_encode_nv_string() function was not checking if the
memory allocation (malloc) it was performing succeeded. Consequently, if the
malloc operation encountered an out of memory (OOM) error,
audit_encode_nv_string() crashed attempting to reference a NULL pointer. With
this update, audit_encode_nv_string() checks if the malloc is successful, which
resolves this issue. (BZ#647128)

* Previously, the man page for the "audit_encode_nv_string" function incorrectly
documented the return value type as an "int". The man page for
"audit_encode_nv_string" now correctly displays return value type for the
"audit_encode_nv_string" function as a "char *" (BZ#647131)

Additionally, the audit packages are updated (rebased) to the upstream version
2.1-1. (BZ#584981) This rebase provides the following bugfix:

* autrace now uses the correct syscalls on i386 systems

In addition, the rebase provides the following enhancements:

* Added support for new event types related to virtualization, netfilter, the
mmap syscall, key based authentication, and cryptographic session establishment.

* Updated syscall tables for the 2.6.37 kernel.

* Updated sample rules for new syscalls and packages.

* The overflow_action configuration item was added to
audisp-remote to allow configurable actions for remote logging queue overflows.

* A new option in the audisp-syslog plug-in to send syslog audit events to
local[0-7]

All audit users are advised to upgrade to these updated packages, which resolve
these issues and add these enhancements.


Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Updated packages

Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
audit-2.1-5.el6.src.rpm
File outdated by:  RHBA-2012:0929
    MD5: 265d2f7cc255db2d866a0d6e7e61b3e1
SHA-256: be33f216c94c9be708386612c89375dd0fe327ed98169de44ce584ff28f0284e
 
IA-32:
audispd-plugins-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 2b786ff455af42d6089bbc80c924f3d4
SHA-256: 763229f1beb34644ab5f0b3dab1856db063a60cfddc2e3bb901c750b28bfc5b6
audit-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: d278a195a5e15d830c7313645adf7d01
SHA-256: 37e13528bc9dc6244f023f8467306925522b3b1060b8e2dbe77e3e8796750cf0
audit-debuginfo-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: c203eb5291f376618d18e118b8748e71
SHA-256: eb9aa3945ab865a763db561e30da76ea58cdfc4a4195cb378618bfa1840166b5
audit-libs-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: ecdd81ed6cce45b160aede5c8696247a
SHA-256: d979d61e2b5bf7d068cc93ea74ac6ec78714894b93c9c0baad2da7f27714ee1f
audit-libs-devel-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 68419e1c4e4fb3024981edf992674db2
SHA-256: 8a6a6d1c5cabede5dca6a4b9ef10c8f905c7bb2960c1ae6bbb4016b106cdde8e
audit-libs-python-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 619af7738dd9c7e98c166b3a62c1046b
SHA-256: 4588171fad3f8bfa1b4f5f63933eff5f080795797dcf7c203e63fa5bdbf70910
audit-libs-static-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 8aa2fcac6c22c581c91b10ccc661e838
SHA-256: 5a0ac229a3184db3b52b173d411b06f88955ace2bd9479e0db98b0abb2cb8345
 
x86_64:
audispd-plugins-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: a7ab123d2011194c486ddebb9503604d
SHA-256: 81741a5a63fd13a513ee2581f449ec7e68cbacbc380747dd14c4fcf3bc9f7d8a
audit-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 4f87fa53e566ec7dde353630a467b662
SHA-256: 0632a845e44b8b689b0031d76df26644df4f03983c1df04605f5433cf84acd65
audit-debuginfo-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: c203eb5291f376618d18e118b8748e71
SHA-256: eb9aa3945ab865a763db561e30da76ea58cdfc4a4195cb378618bfa1840166b5
audit-debuginfo-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: c4bb63800f12871bf886c8f05cf471f5
SHA-256: 0a33fa33fcc58ceeb87b3ec175af3b918728515d05fc5cd15c577894b41c4c06
audit-libs-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: ecdd81ed6cce45b160aede5c8696247a
SHA-256: d979d61e2b5bf7d068cc93ea74ac6ec78714894b93c9c0baad2da7f27714ee1f
audit-libs-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: f6997207700f58df5b48cdc0830043ba
SHA-256: d9647a59c6ddb5e7ff59bf92f28d9332d83d2dd1bc02b201348c20915fe000ff
audit-libs-devel-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 68419e1c4e4fb3024981edf992674db2
SHA-256: 8a6a6d1c5cabede5dca6a4b9ef10c8f905c7bb2960c1ae6bbb4016b106cdde8e
audit-libs-devel-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 4f6530edf47edc0bd4cb091563b3e1db
SHA-256: 3120ab955766b2fff7351422512be7a3c5085f4b7f963e9d618c40ce84d809b8
audit-libs-python-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 460e323fb9aa32caee1e224e8f4939d5
SHA-256: 91b7ff1976776266abc9ae061e26fab71189ad84ccb9f67d30abd1d294dcb184
audit-libs-static-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: db582b567e84f884dd9c377ac9bb28e3
SHA-256: 5b8a41d17c4070ce466cf51672715db1b206114b438043b162bedd5ccffadabf
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
audit-2.1-5.el6.src.rpm
File outdated by:  RHBA-2012:0929
    MD5: 265d2f7cc255db2d866a0d6e7e61b3e1
SHA-256: be33f216c94c9be708386612c89375dd0fe327ed98169de44ce584ff28f0284e
 
x86_64:
audispd-plugins-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: a7ab123d2011194c486ddebb9503604d
SHA-256: 81741a5a63fd13a513ee2581f449ec7e68cbacbc380747dd14c4fcf3bc9f7d8a
audit-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 4f87fa53e566ec7dde353630a467b662
SHA-256: 0632a845e44b8b689b0031d76df26644df4f03983c1df04605f5433cf84acd65
audit-debuginfo-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: c203eb5291f376618d18e118b8748e71
SHA-256: eb9aa3945ab865a763db561e30da76ea58cdfc4a4195cb378618bfa1840166b5
audit-debuginfo-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: c4bb63800f12871bf886c8f05cf471f5
SHA-256: 0a33fa33fcc58ceeb87b3ec175af3b918728515d05fc5cd15c577894b41c4c06
audit-libs-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: ecdd81ed6cce45b160aede5c8696247a
SHA-256: d979d61e2b5bf7d068cc93ea74ac6ec78714894b93c9c0baad2da7f27714ee1f
audit-libs-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: f6997207700f58df5b48cdc0830043ba
SHA-256: d9647a59c6ddb5e7ff59bf92f28d9332d83d2dd1bc02b201348c20915fe000ff
audit-libs-devel-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 68419e1c4e4fb3024981edf992674db2
SHA-256: 8a6a6d1c5cabede5dca6a4b9ef10c8f905c7bb2960c1ae6bbb4016b106cdde8e
audit-libs-devel-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 4f6530edf47edc0bd4cb091563b3e1db
SHA-256: 3120ab955766b2fff7351422512be7a3c5085f4b7f963e9d618c40ce84d809b8
audit-libs-python-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 460e323fb9aa32caee1e224e8f4939d5
SHA-256: 91b7ff1976776266abc9ae061e26fab71189ad84ccb9f67d30abd1d294dcb184
audit-libs-static-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: db582b567e84f884dd9c377ac9bb28e3
SHA-256: 5b8a41d17c4070ce466cf51672715db1b206114b438043b162bedd5ccffadabf
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
audit-2.1-5.el6.src.rpm
File outdated by:  RHBA-2012:0929
    MD5: 265d2f7cc255db2d866a0d6e7e61b3e1
SHA-256: be33f216c94c9be708386612c89375dd0fe327ed98169de44ce584ff28f0284e
 
IA-32:
audispd-plugins-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 2b786ff455af42d6089bbc80c924f3d4
SHA-256: 763229f1beb34644ab5f0b3dab1856db063a60cfddc2e3bb901c750b28bfc5b6
audit-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: d278a195a5e15d830c7313645adf7d01
SHA-256: 37e13528bc9dc6244f023f8467306925522b3b1060b8e2dbe77e3e8796750cf0
audit-debuginfo-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: c203eb5291f376618d18e118b8748e71
SHA-256: eb9aa3945ab865a763db561e30da76ea58cdfc4a4195cb378618bfa1840166b5
audit-libs-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: ecdd81ed6cce45b160aede5c8696247a
SHA-256: d979d61e2b5bf7d068cc93ea74ac6ec78714894b93c9c0baad2da7f27714ee1f
audit-libs-devel-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 68419e1c4e4fb3024981edf992674db2
SHA-256: 8a6a6d1c5cabede5dca6a4b9ef10c8f905c7bb2960c1ae6bbb4016b106cdde8e
audit-libs-python-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 619af7738dd9c7e98c166b3a62c1046b
SHA-256: 4588171fad3f8bfa1b4f5f63933eff5f080795797dcf7c203e63fa5bdbf70910
audit-libs-static-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 8aa2fcac6c22c581c91b10ccc661e838
SHA-256: 5a0ac229a3184db3b52b173d411b06f88955ace2bd9479e0db98b0abb2cb8345
 
PPC:
audispd-plugins-2.1-5.el6.ppc64.rpm
File outdated by:  RHBA-2012:0929
    MD5: c21b4dffcd75c81a8ce84fdf0e743da9
SHA-256: f40bf9a368e6176e7894e989ed77f04ae8c8aaf6ec3675ca284a7525d9b8fb2f
audit-2.1-5.el6.ppc64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 5aef68d8fe47736bb2263c3f1059ee68
SHA-256: e6f13d9b054e5aed1bb19ccb3e375d0ecdca279a134853e1a044fbf92280df52
audit-debuginfo-2.1-5.el6.ppc.rpm
File outdated by:  RHBA-2012:0929
    MD5: 0673fbbba91b136bac2e13cbbafb1d28
SHA-256: fde3c23b2c5fda2db7edbc6cf74b76095d47cd37cbfc9a78c796b45afe70442a
audit-debuginfo-2.1-5.el6.ppc64.rpm
File outdated by:  RHBA-2012:0929
    MD5: d6b7a659a95f38e533730627ac195b73
SHA-256: aa7dad361f999f6992801c4cf65b72dad92096e45f25fd42278df477226c3e41
audit-libs-2.1-5.el6.ppc.rpm
File outdated by:  RHBA-2012:0929
    MD5: fe9f403f23f67bfbbaf71ede16ca54f5
SHA-256: ab03a6626e50e27fe0e4a99cf5128cb362d4fd16b67805ce583ceb22b0435ea5
audit-libs-2.1-5.el6.ppc64.rpm
File outdated by:  RHBA-2012:0929
    MD5: ebc645dc05b7b80e291570d9fbe0ce7c
SHA-256: 0bb1b9abc13bb21db6dcc854b789570cd1877ffb72957e7d3c03880e6f7ac767
audit-libs-devel-2.1-5.el6.ppc.rpm
File outdated by:  RHBA-2012:0929
    MD5: 9820a2a68a3eac41c40e6db2784f651a
SHA-256: a7d1094d05ebb59241aa8fea68a4ee15d1ad293a66afd38b3f527c8c8f1741fe
audit-libs-devel-2.1-5.el6.ppc64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 358275ff8ff93f00da8bca350ecdf2ff
SHA-256: 90ea208cc99ff7fb0fb9f4d27207056ee2269dcb6a7fc596c11b5cf77c750e1b
audit-libs-python-2.1-5.el6.ppc64.rpm
File outdated by:  RHBA-2012:0929
    MD5: f0fa9e5b3763a5e35c19dc84f4b03fdb
SHA-256: eabc28c5a6fd058530cdd58d1e87b2acd2d7937ece1e14878bd8b8ebe29437b5
audit-libs-static-2.1-5.el6.ppc64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 70af47b4bb5d5d7a1b9eeca186ee2053
SHA-256: 0aef2b7b51bf0e689475f99b37110abc84bea5a4d211f4d7d9a42946cc3b673c
 
s390x:
audispd-plugins-2.1-5.el6.s390x.rpm
File outdated by:  RHBA-2012:0929
    MD5: 8f79b0f76e0bda4ffb8f0a6b49bfe52e
SHA-256: 4fd95ca9610ffda84ddbd0669805c9dd2ebc77b7db7886b59dfbc6ee839ebaef
audit-2.1-5.el6.s390x.rpm
File outdated by:  RHBA-2012:0929
    MD5: 63c34af162f4e1d7312f077257fa957b
SHA-256: a57e22e072b40c68377f60b2f4177c726be108604d213e51a97db56aebf0b1a1
audit-debuginfo-2.1-5.el6.s390.rpm
File outdated by:  RHBA-2012:0929
    MD5: 623dc853f5424f64f2b710281ccc0670
SHA-256: 572fe92a64e825020897e867cb8e082c7f3786ef266f461908fbd8c003881d01
audit-debuginfo-2.1-5.el6.s390x.rpm
File outdated by:  RHBA-2012:0929
    MD5: dec23bf91133de6f8a51e777832a015b
SHA-256: f377dace6381fbc0706872cb4d90f9276264c04f701ff5aee3fa0cc7d580a366
audit-libs-2.1-5.el6.s390.rpm
File outdated by:  RHBA-2012:0929
    MD5: 47947b57e404f1604be21e63922fa1a7
SHA-256: 51db2a3841a45f27ace99c8464b93fec44e5fba8266175aec3fa9e59d2e9a0a9
audit-libs-2.1-5.el6.s390x.rpm
File outdated by:  RHBA-2012:0929
    MD5: 8e0c65e45a18643c2c4974e29a662eb1
SHA-256: 17cff7e264b7a3873cf2e42f21f188efc7e86019700e0df832b327a737d0fffe
audit-libs-devel-2.1-5.el6.s390.rpm
File outdated by:  RHBA-2012:0929
    MD5: ea4e9e697380b98fafafef1468bd17d9
SHA-256: 5d869dd0affb2bc0fed8142bdb4d637e759054c8c3eaa1ed92d3bbd355653fd3
audit-libs-devel-2.1-5.el6.s390x.rpm
File outdated by:  RHBA-2012:0929
    MD5: 14e092cd078f383391112dfb06ae3048
SHA-256: e4e18032765dc1033c663524f41f94f2a642f037dccb1c5432ed64badd2d0fe1
audit-libs-python-2.1-5.el6.s390x.rpm
File outdated by:  RHBA-2012:0929
    MD5: f3db167091d887dbaf59342e21dda560
SHA-256: b8fa2d304cb007325dc6f7b8811c44ff1e7db952d9d88eea9970ef834f5a38d4
audit-libs-static-2.1-5.el6.s390x.rpm
File outdated by:  RHBA-2012:0929
    MD5: 7a8cf153aa84200cf51e0c4c0f90f523
SHA-256: 6695a776588f8c2fbfb05e0b6279b9fc32fcef23c713da056533182b828db362
 
x86_64:
audispd-plugins-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: a7ab123d2011194c486ddebb9503604d
SHA-256: 81741a5a63fd13a513ee2581f449ec7e68cbacbc380747dd14c4fcf3bc9f7d8a
audit-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 4f87fa53e566ec7dde353630a467b662
SHA-256: 0632a845e44b8b689b0031d76df26644df4f03983c1df04605f5433cf84acd65
audit-debuginfo-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: c203eb5291f376618d18e118b8748e71
SHA-256: eb9aa3945ab865a763db561e30da76ea58cdfc4a4195cb378618bfa1840166b5
audit-debuginfo-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: c4bb63800f12871bf886c8f05cf471f5
SHA-256: 0a33fa33fcc58ceeb87b3ec175af3b918728515d05fc5cd15c577894b41c4c06
audit-libs-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: ecdd81ed6cce45b160aede5c8696247a
SHA-256: d979d61e2b5bf7d068cc93ea74ac6ec78714894b93c9c0baad2da7f27714ee1f
audit-libs-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: f6997207700f58df5b48cdc0830043ba
SHA-256: d9647a59c6ddb5e7ff59bf92f28d9332d83d2dd1bc02b201348c20915fe000ff
audit-libs-devel-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 68419e1c4e4fb3024981edf992674db2
SHA-256: 8a6a6d1c5cabede5dca6a4b9ef10c8f905c7bb2960c1ae6bbb4016b106cdde8e
audit-libs-devel-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 4f6530edf47edc0bd4cb091563b3e1db
SHA-256: 3120ab955766b2fff7351422512be7a3c5085f4b7f963e9d618c40ce84d809b8
audit-libs-python-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 460e323fb9aa32caee1e224e8f4939d5
SHA-256: 91b7ff1976776266abc9ae061e26fab71189ad84ccb9f67d30abd1d294dcb184
audit-libs-static-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: db582b567e84f884dd9c377ac9bb28e3
SHA-256: 5b8a41d17c4070ce466cf51672715db1b206114b438043b162bedd5ccffadabf
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
audit-2.1-5.el6.src.rpm
File outdated by:  RHBA-2012:0929
    MD5: 265d2f7cc255db2d866a0d6e7e61b3e1
SHA-256: be33f216c94c9be708386612c89375dd0fe327ed98169de44ce584ff28f0284e
 
IA-32:
audispd-plugins-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 2b786ff455af42d6089bbc80c924f3d4
SHA-256: 763229f1beb34644ab5f0b3dab1856db063a60cfddc2e3bb901c750b28bfc5b6
audit-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: d278a195a5e15d830c7313645adf7d01
SHA-256: 37e13528bc9dc6244f023f8467306925522b3b1060b8e2dbe77e3e8796750cf0
audit-debuginfo-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: c203eb5291f376618d18e118b8748e71
SHA-256: eb9aa3945ab865a763db561e30da76ea58cdfc4a4195cb378618bfa1840166b5
audit-libs-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: ecdd81ed6cce45b160aede5c8696247a
SHA-256: d979d61e2b5bf7d068cc93ea74ac6ec78714894b93c9c0baad2da7f27714ee1f
audit-libs-devel-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 68419e1c4e4fb3024981edf992674db2
SHA-256: 8a6a6d1c5cabede5dca6a4b9ef10c8f905c7bb2960c1ae6bbb4016b106cdde8e
audit-libs-python-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 619af7738dd9c7e98c166b3a62c1046b
SHA-256: 4588171fad3f8bfa1b4f5f63933eff5f080795797dcf7c203e63fa5bdbf70910
audit-libs-static-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 8aa2fcac6c22c581c91b10ccc661e838
SHA-256: 5a0ac229a3184db3b52b173d411b06f88955ace2bd9479e0db98b0abb2cb8345
 
x86_64:
audispd-plugins-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: a7ab123d2011194c486ddebb9503604d
SHA-256: 81741a5a63fd13a513ee2581f449ec7e68cbacbc380747dd14c4fcf3bc9f7d8a
audit-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 4f87fa53e566ec7dde353630a467b662
SHA-256: 0632a845e44b8b689b0031d76df26644df4f03983c1df04605f5433cf84acd65
audit-debuginfo-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: c203eb5291f376618d18e118b8748e71
SHA-256: eb9aa3945ab865a763db561e30da76ea58cdfc4a4195cb378618bfa1840166b5
audit-debuginfo-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: c4bb63800f12871bf886c8f05cf471f5
SHA-256: 0a33fa33fcc58ceeb87b3ec175af3b918728515d05fc5cd15c577894b41c4c06
audit-libs-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: ecdd81ed6cce45b160aede5c8696247a
SHA-256: d979d61e2b5bf7d068cc93ea74ac6ec78714894b93c9c0baad2da7f27714ee1f
audit-libs-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: f6997207700f58df5b48cdc0830043ba
SHA-256: d9647a59c6ddb5e7ff59bf92f28d9332d83d2dd1bc02b201348c20915fe000ff
audit-libs-devel-2.1-5.el6.i686.rpm
File outdated by:  RHBA-2012:0929
    MD5: 68419e1c4e4fb3024981edf992674db2
SHA-256: 8a6a6d1c5cabede5dca6a4b9ef10c8f905c7bb2960c1ae6bbb4016b106cdde8e
audit-libs-devel-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 4f6530edf47edc0bd4cb091563b3e1db
SHA-256: 3120ab955766b2fff7351422512be7a3c5085f4b7f963e9d618c40ce84d809b8
audit-libs-python-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: 460e323fb9aa32caee1e224e8f4939d5
SHA-256: 91b7ff1976776266abc9ae061e26fab71189ad84ccb9f67d30abd1d294dcb184
audit-libs-static-2.1-5.el6.x86_64.rpm
File outdated by:  RHBA-2012:0929
    MD5: db582b567e84f884dd9c377ac9bb28e3
SHA-256: 5b8a41d17c4070ce466cf51672715db1b206114b438043b162bedd5ccffadabf
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

640948 - inodes display incorrectly when listing rules
647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
647131 - Man page for audit_encode_nv_string() is incorrect
670938 - searching on auid = -1 results in all events
688664 - Auditd disk_error_action tries to execute a program when the SYSLOG action was chosen
695605 - audisp-remote calls bind() incorrectly
697463 - Broken autrace -r on s390x
700098 - aureport --tty segfaults



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/