-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 11 Aug 2025 17:13:52 +0200 Source: aide Binary: aide aide-dbgsym Architecture: armel Version: 0.18.3-1+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Hannes von Haugwitz Description: aide - Advanced Intrusion Detection Environment - dynamic binary Changes: aide (0.18.3-1+deb12u4) bookworm-security; urgency=high . * Apply upstream patch to escape control characters in report and log output (CVE-2025-54389) * also apply upstream patch to fix double free during report generation, which is required for the security patch * Apply upstream patch to fix null pointer dereference after reading incorrectly encoded xattr attributes from database (CVE-2025-54409) Checksums-Sha1: e190888f5e0c08cc0f9bec21b3f75f7f3469c714 187924 aide-dbgsym_0.18.3-1+deb12u4_armel.deb 55449840d6329e0970d375e57d8bd62cb60aecc8 6865 aide_0.18.3-1+deb12u4_armel-buildd.buildinfo 2b823d80f31939afde3971ccfb165a2848ba8e61 122000 aide_0.18.3-1+deb12u4_armel.deb Checksums-Sha256: 68e20aaa10d52c1028e8ded1fff8a2fe8838621c745905d69c5c8d7d8a8590bd 187924 aide-dbgsym_0.18.3-1+deb12u4_armel.deb c3b9a4f0234e79e39de6adc19d500faf33e72ec314011bebecd00ee1b0c48e7f 6865 aide_0.18.3-1+deb12u4_armel-buildd.buildinfo 679d5f03666735ae0310896b07e51146734b571c576335dc17b1f1aca0fc074c 122000 aide_0.18.3-1+deb12u4_armel.deb Files: 16dee99d652aade0cb3aa24d449af5f1 187924 debug optional aide-dbgsym_0.18.3-1+deb12u4_armel.deb e2e7e85dc5a2a546688f45c6989c54cc 6865 admin optional aide_0.18.3-1+deb12u4_armel-buildd.buildinfo e48834b8f81ef53ef1367f3f38531a58 122000 admin optional aide_0.18.3-1+deb12u4_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmiaVmAACgkQVLd4YzMS DKE2bA//U5oNeEBr/WYFSmM2optS8zU6XVCKKAnH9cQYfHgcqytuECXF4oz5nX5d b0GRpjbknZW7ZtIqecyLO4lwpEML0y+p0IIX4/SWjLLTTj+oIS9ECkPFbZymQQmc 5Z4mUaTLGI7c9uehfRTNS3RXzhFx8JXNsAuyNqXhsVorgXeLgV54xdDmbQwfdvTI LnX/++TEDsmgFCkZb5/dQXNZn4Ja8lPXDeHwksgcLzSYaqICXUfA8ix69kfGL9Ls hsMUm8fTGquny7BBsyuIe3iwbV98Dk/ZJSQXSYZcC0HzH2LiP3i4F6cF/BbhRhM0 5NDd84sA3AXV/o4+HK/Q9YBmRAGwQnetrFf9xHi/XXgqzC7kiQvIFW4thqcYXoHw lXAcU1meFZUDfxPzSQhAp42e1aS2bOLhBokmyXH8viumpuctpe+ZQlvxGmGMuzwO bMBW76y67jbOt+ot+rWLiVBdfqBgybtouk5GjNNWAN3zHTCc1RbSjB4bsppp65dP hNlRFpwH58ASBGCb2U6dkPPeKTxYlcZnJP+DMDLs0vHSv4XOuNkkTrWsG6ha5enG fDx9qJSbmKs/dTBg4/JxZfSQmrNJK7CbnFchv+0EEgZXtMVrvFC5cNUXTXzA6mbz TAYyqSJiDf0rpkeqCIoPz2oHhupycVTDoy1rT5dOhandW+KUzvw= =GcdV -----END PGP SIGNATURE-----