rpms/aide
7
0
Fork 0
Code Issues Pull Requests Releases Activity

RHEL 8.10.Z ERRATUM

Browse Source 
CVE-2025-54389 aide: improper output neutralization enables bypassing
resolves: RHEL-109907
This commit is contained in:
Cropi 2025-08-21 07:47:24 +02:00
parent a7d8e6a59d
commit 8a006b5c48
2 changed files with 1670 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1662
aide-0.16-CVE-2025-54389.patch Normal file
View File

File diff suppressed because it is too large Load Diff

9
aide.spec
View File

@ -1,7 +1,7 @@
Summary: Intrusion detection environment
Name: aide
Version: 0.16
Release: 15%{?dist}
Release: 15%{?dist}.1
URL: http://sourceforge.net/projects/aide
License: GPLv2+
Source0: %{url}/files/aide/%{version}/%{name}-%{version}.tar.gz
@ -40,6 +40,9 @@ Patch7: coverity2.patch
# 2041957 - CVE-2021-45417 aide: heap-based buffer overflow on outputs larger than B64_BUF
Patch8: aide-0.16-CVE-2021-45417.patch
# CVE-2025-54389 aide: improper output neutralization enables bypassing
Patch9: aide-0.16-CVE-2025-54389.patch
%description
AIDE (Advanced Intrusion Detection Environment) is a file integrity
checker and intrusion detection program.
@ -84,6 +87,10 @@ mkdir -p -m0700 %{buildroot}%{_localstatedir}/lib/aide
%dir %attr(0700,root,root) %{_localstatedir}/log/aide
%changelog
* Thu Aug 21 2025 Attila Lakatos <alakatos@redhat.com> - 0.16.15.1
- CVE-2025-54389 aide: improper output neutralization enables bypassing
resolves: RHEL-109907
* Tue Jan 25 2022 Radovan Sroka <rsroka@redhat.com> - 0.16.15
- backported fix for CVE-2021-45417
resolves: rhbz#2041957