Audit Bug Fix and Enhancement Update - ALBA-2022:2096
Summary
ALBA-2022:2096: audit bug fix and enhancement update. Affects audispd-plugins versions < 3.0.7-2.el8.2. Fixed in 3.0.7-2.el8.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The audit package is a comprehensive logging and auditing system for Linux. It provides a way to track security-relevant information on the system, such as user activity, system calls, and file access. The audispd-plugins package contains various plugins for the audit system, while audispd-plugins-zos is a plugin specifically designed for z/OS. Audit-libs and audit-libs-devel are libraries required for audit functionality. Python3-audit is a Python binding for the audit library. This vulnerability affects AlmaLinux 8.
Vulnerability Detail
This vulnerability is related to the audit package and its associated plugins. It could allow an attacker to bypass auditing and logging mechanisms, potentially leading to unauthorized access, data breaches, or other security incidents. The vulnerability was fixed in version 3.0.7-2.el8.2 of the affected packages.
How To Fix
Minimum fixed version
3.0.7-2.el8.2
This is the first release that contains the fix.
sudo dnf update audispd-pluginsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This vulnerability in the audit package and its associated plugins could allow attackers to bypass auditing and logging mechanisms, potentially leading to unauthorized access and data breaches. It is crucial to update the affected packages to version 3.0.7-2.el8.2 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for audispd-plugins →
FAQ
This vulnerability could allow an attacker to bypass auditing and logging mechanisms, potentially leading to unauthorized access, data breaches, or other security incidents.
The following packages are affected: audispd-plugins, audispd-plugins-zos, audit, audit-libs, audit-libs-devel, python3-audit.
You can use the package manager command specific to your Linux distribution to check the installed version of the affected packages. For example, on AlmaLinux 8, you can use the following command:
rpm -q audispd-plugins audispd-plugins-zos audit audit-libs audit-libs-devel python3-audit
No specific workaround is mentioned for this vulnerability. It is recommended to update the affected packages to the fixed version.
You can find more information about this vulnerability in the AlmaLinux Release Notes linked from the References section of the advisory.
