-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 11 Aug 2025 17:13:52 +0200 Source: aide Binary: aide aide-dbgsym Architecture: s390x Version: 0.18.3-1+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Hannes von Haugwitz Description: aide - Advanced Intrusion Detection Environment - dynamic binary Changes: aide (0.18.3-1+deb12u4) bookworm-security; urgency=high . * Apply upstream patch to escape control characters in report and log output (CVE-2025-54389) * also apply upstream patch to fix double free during report generation, which is required for the security patch * Apply upstream patch to fix null pointer dereference after reading incorrectly encoded xattr attributes from database (CVE-2025-54409) Checksums-Sha1: 817da3dfeb179acc44cda2ed5a49f90c38032da5 191312 aide-dbgsym_0.18.3-1+deb12u4_s390x.deb f7bcf7c5ede9b41ef5564b779dc67a943ceddbbc 6895 aide_0.18.3-1+deb12u4_s390x-buildd.buildinfo 79dada50bfa05e873716bea4653ae02109651d72 124840 aide_0.18.3-1+deb12u4_s390x.deb Checksums-Sha256: e53f82778d0312c2711159dfb63808011c3c5879e9bff3b7eb33b2ebba753241 191312 aide-dbgsym_0.18.3-1+deb12u4_s390x.deb 20071b2d8f33ad6802406246f0218be079833755e3634f66f0f7c28ca85a8c27 6895 aide_0.18.3-1+deb12u4_s390x-buildd.buildinfo a8059407e83001bd2d11bc65084c76df0913c1f322adf88e9976c76c242e9aa0 124840 aide_0.18.3-1+deb12u4_s390x.deb Files: 17a6ae93cd1e59a245fc26a2f5b5f628 191312 debug optional aide-dbgsym_0.18.3-1+deb12u4_s390x.deb 71e594500fe467ebf6f80be2cfd79061 6895 admin optional aide_0.18.3-1+deb12u4_s390x-buildd.buildinfo 762caa680bda75d2d14fe8d94cab85c7 124840 admin optional aide_0.18.3-1+deb12u4_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmiaVfEACgkQAKOyQzsW Vas6iRAAhddFyicrcUtAFeuqI8020jeIzLiJLYTz30G3H2mAZBbpqSQKsq6Ale9w 74YYfvCk+39c6TwK73G7nfRtTlSYvx1vb3jcPuoVvVpy118HSQq2tCqwFeJZBKNw bJWRbteH6+VF1m1usz7y7Xu/Ke0wCrER9NopTTc1rX/jZaq/Qa/iGPop3DR4B0M6 S3HiyHbu7CKkze4zG2vDkL/2W5nRUQdHzRnmFfOPSoFoSKGJu0+EFXXr6OJPMbb9 i1ZEVsMOgSrHfI7hc80O8NVI0Dfm22RSAAJAt6+08lFJfoa50eUWzda3MzzuYKaQ gBep/n6eP7wi4NzsrbzllGAwOW92YPhLF2hq/ELAEjKppbbkySrHPnLoYUEB19i7 F6ZkrBCgXGrjUabPB7GBOGvzqIuHq0eNF8eIM5DdveTzwsizfbstJIgGUHoLGoR7 v2pv3N6i6ZMkeRbLt4MUlhnRr1S5vsxkbPH9KtogrZDmwuP1sAFnxbmBuyi2QYfH zTo9kq4k4+Oi/PHmT7i97oY/Ax31SiY5O/3rTVQDMEALTLPJMoCxIBVYxRhb9BPf ZIlpBuM/GN0tSHJJDTB7+bXgxLVODCbF5yvfs1j/yiquaqfuU3UrxDD0j9LIa/Mz MrRAtyNPUc+AHF0koYb9BGstbrz2+TFM8hn0Z5zG/QxZTyCKjDw= =nBeh -----END PGP SIGNATURE-----