Accepting request 329223 from home:jones_tony:branches:security

OBS-URL: https://build.opensuse.org/request/show/329223
OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=78

audit-2.4.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:059346fa0e922faf4dcc054382b21f4845cd8c4942e82cfd0d4cd52bd2b03026
-size 942147

audit-2.4.4.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:25f57f465f3230d7b1166b615ffd6748818a3dc225d0e8b396c5b2e951674e23
+size 1004024

audit-secondary.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Fri Aug 21 19:00:36 UTC 2015 - tonyj@suse.com
+
+- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
+  changelog
+- Add python3 bindings for libaudit and libauparse
+- Remove patch 'audit-no_m4_dir.patch'
+  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
+  No idea what earlier 'automake' build error this was trying to fix but
+  it broke the handling of "--without-libcap-ng". Anyways, no build error
+  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
+
 -------------------------------------------------------------------
 Tue Sep  2 17:35:12 UTC 2014 - tonyj@suse.com
 

audit-secondary.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package audit-secondary
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -26,19 +26,19 @@ BuildRequires:  gcc-c++
 BuildRequires:  openldap2-devel
 BuildRequires:  pkg-config
 BuildRequires:  python-devel
+BuildRequires:  python3-devel
 BuildRequires:  swig
 Summary:        Secondary packages for audit
 License:        GPL-2.0+
 Group:          System/Monitoring
-Version:        2.4.1
+Version:        2.4.4
 Release:        0
 Url:            http://people.redhat.com/sgrubb/audit/
 Source0:        http://people.redhat.com/sgrubb/audit/%{_name}-%{version}.tar.gz
 Patch1:         audit-plugins-path.patch
 Patch2:         audit-no-gss.patch
-Patch3:         audit-no_m4_dir.patch
+Patch3:         audit-allow-manual-stop.patch
-Patch4:         audit-allow-manual-stop.patch
+Patch4:         audit-ausearch-do-not-require-tclass.patch
-Patch5:         audit-ausearch-do-not-require-tclass.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  audit-devel = %{version}
 BuildRequires:  autoconf >= 2.12
@@ -75,6 +75,16 @@ Group:          System/Monitoring
 The audit-libs-python package contains the bindings for using libaudit
 by python.
 
+%package -n audit-libs-python3
+Summary:        Python3 Bindings for libaudit
+License:        LGPL-2.1+
+Group:          System/Monitoring
+%py_requires
+
+%description -n audit-libs-python3
+The audit-libs-python3 package contains the bindings for using libaudit
+by python3.
+
 %package -n audit-audispd-plugins
 Summary:        Default plugins for the audit dispatcher
 License:        GPL-2.0+
@@ -95,7 +105,6 @@ rm -rf audisp/plugins/prelude
 %patch2 -p1
 %patch3 -p1
 %patch4 -p1
-%patch5 -p1
 %build
 autoreconf -fi
 export CFLAGS="%{optflags} -fno-strict-aliasing"
@@ -131,14 +140,11 @@ rm -rf $RPM_BUILD_ROOT/etc/rc.d/init.d
 # https://lists.fedoraproject.org/pipermail/devel/2012-June/169411.html
 rm -rf $RPM_BUILD_ROOT/usr/lib/audit
 # Clean up some unneeded library files
-rm -f $RPM_BUILD_ROOT/%{_libdir}/python%{py_ver}/site-packages/_audit.a
+for ver in %{py_ver} %{py3_ver}; do
-rm -f $RPM_BUILD_ROOT/%{_libdir}/python%{py_ver}/site-packages/_audit.la
+  rm -f $RPM_BUILD_ROOT/%{_libdir}/python${ver}/site-packages/{_audit,_auparse,auparse}.{a,la}
-rm -f $RPM_BUILD_ROOT/%{_libdir}/python%{py_ver}/site-packages/_auparse.a
+  rm -f $RPM_BUILD_ROOT/%{_libdir}/python${ver}/site-packages/auparse-1.0-py${ver}.egg-info
-rm -f $RPM_BUILD_ROOT/%{_libdir}/python%{py_ver}/site-packages/_auparse.la
+done
-rm -f $RPM_BUILD_ROOT/%{_libdir}/python%{py_ver}/site-packages/auparse.a
+rm -f $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/{audit,auparse}.pc
-rm -f $RPM_BUILD_ROOT/%{_libdir}/python%{py_ver}/site-packages/auparse.la
-rm -f $RPM_BUILD_ROOT/%{_libdir}/python%{py_ver}/site-packages/auparse-1.0-py%{py_ver}.egg-info
-rm -f $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/audit.pc
 # cleanup files handled by audit.spec
 rm -rf $RPM_BUILD_ROOT/%{_includedir}
 rm -f $RPM_BUILD_ROOT/%{_libdir}/lib{audit,auparse}.*
@@ -243,6 +249,12 @@ fi
 %attr(755,root,root) %{_libdir}/python%{py_ver}/site-packages/auparse.so
 %{_libdir}/python%{py_ver}/site-packages/audit.py*
 
+%files -n audit-libs-python3
+%defattr(-,root,root,-)
+%attr(755,root,root) %{_libdir}/python%{py3_ver}/site-packages/_audit.so
+%attr(755,root,root) %{_libdir}/python%{py3_ver}/site-packages/auparse.so
+%{_libdir}/python%{py3_ver}/site-packages/audit.py*
+
 %files -n audit-audispd-plugins
 %defattr(-,root,root,-)
 %attr(644,root,root) %{_mandir}/man8/audispd-zos-remote.8.gz

audit.changes

@@ -1,3 +1,50 @@
+-------------------------------------------------------------------
+Fri Aug 21 18:58:18 UTC 2015 - tonyj@suse.com
+
+- Update to version 2.4.4 (bsc#941922, CVE-2015-5186) 
+- Remove patch 'audit-no_m4_dir.patch'
+  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com) 
+  No idea what earlier 'automake' build error this was trying to fix but 
+  it broke the handling of "--without-libcap-ng". Anyways, no build error 
+  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
+- Require pkgconfig for build
+  
+ Changelog 2.4.4
+  - Fix linked list correctness in ausearch/report
+  - Add more cross compile fixups (Clayton Shotwell)
+  - Update auparse python bindings
+  - Update libev to 4.20
+  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
+  
+ Changelog 2.4.3
+  - Add python3 support for libaudit
+  - Cleanup automake warnings
+  - Add AuParser_search_add_timestamp_item_ex to python bindings
+  - Add AuParser_get_type_name to python bindings
+  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
+  - Make plugin config file parsing more robust for long lines (#1235457)
+  - Make auditctl status print lost field as unsigned number
+  - Add interpretation mode for auditctl -s
+  - Add python3 support to auparse library
+  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
+  - Updates for cross compiling (Clayton Shotwell)
+  - Add MAC_CHECK audit event type
+  - Add libauparse pkgconfig file (Aleksander Zdyb)
+  
+ Changelog 2.4.2
+  - Ausearch should parse exe field in SECCOMP events
+  - Improve output for short mode interpretations in auparse
+  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
+  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
+  - Correct lookup of ppc64le when determining machine type
+  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
+  - In aureport, add USER_TTY events to tty report
+  - In audispd, limit reporting of queue full messages (#1203810)
+  - In auditctl, don't segfault when invalid options passed (#1206516)
+  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
+  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
+  - Update lookup tables for 4.1 kernel
+
 -------------------------------------------------------------------
 Mon Nov 24 14:55:22 UTC 2014 - mq@suse.cz
 

audit.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package audit
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,18 +20,18 @@ Name:           audit
 Summary:        First part of auditing package
 License:        GPL-2.0+
 Group:          System/Monitoring
-Version:        2.4.1
+Version:        2.4.4
 Release:        0
 Url:            http://people.redhat.com/sgrubb/audit/
 Source0:        http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
 Source1:        baselibs.conf
 Source2:        README-BEFORE-ADDING-PATCHES
-Patch1:         audit-no_m4_dir.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  autoconf >= 2.12
 BuildRequires:  gcc-c++
 BuildRequires:  kernel-headers >= 2.6.30
 BuildRequires:  libtool
+BuildRequires:  pkgconfig
 BuildRequires:  tcpd-devel
 Requires:       %{name}-libs = %{version}
 PreReq:         %insserv_prereq %fillup_prereq
@@ -75,7 +75,6 @@ libraries.
 
 %prep
 %setup -q -n %{name}-%{version}
-%patch1 -p1
 
 %build
 autoreconf -fi
@@ -138,5 +137,6 @@ install -m 0644 init.d/libaudit.conf $RPM_BUILD_ROOT/etc
 %{_includedir}/auparse-defs.h
 %{_mandir}/man3/*
 %{_libdir}/pkgconfig/audit.pc
+%{_libdir}/pkgconfig/auparse.pc
 
 %changelog