Ubuntu
aide package

aide 0.16-3ubuntu0.1 source package in Ubuntu

Changelog

aide (0.16-3ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: heap overflow in base64 functions
    - debian/patches/CVE-2021-45417.patch: use appropriate lengths in
      include/base64.h, src/base64.c, src/db.c.
    - CVE-2021-45417

 -- Marc Deslauriers <email address hidden>  Mon, 17 Jan 2022 07:03:06 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main admin
Bionic security main admin

Downloads

File Size SHA-256 Checksum
aide_0.16.orig.tar.gz 381.8 KiB a81c53a131c4fd130b169b3a26ac35386a2f6e1e014f12807524cc273ed97345
aide_0.16-3ubuntu0.1.debian.tar.xz 83.1 KiB ba200c725b1e26ba0640b46a0baf12b0efbc0d8b6b1a7ec5ee97b24024bceebe
aide_0.16-3ubuntu0.1.dsc 2.3 KiB c1eb3d01cb449f3a3c1629168beec7f20fdfeb8d9d8f2767144acad57c54326c

View changes file

Binary packages built by this source

aide: Advanced Intrusion Detection Environment - static binary

 AIDE is an intrusion detection system that detects changes to files on
 the local system. It creates a database from the regular expression rules
 that it finds from the config file. Once this database is initialized
 it can be used to verify the integrity of the files. It has several
 message digest algorithms (md5, sha1, rmd160, tiger, haval, etc.) that are
 used to check the integrity of the file. More algorithms can be added
 with relative ease. All of the usual file attributes can also be checked
 for inconsistencies.
 .
 This package contains the statically linked binary for "normal"
 systems.

aide-common: Advanced Intrusion Detection Environment - Common files

 AIDE is an intrusion detection system that detects changes to files on
 the local system. It creates a database from the regular expression rules
 that it finds from the config file. Once this database is initialized
 it can be used to verify the integrity of the files. It has several
 message digest algorithms (md5, sha1, rmd160, tiger, haval, etc.) that are
 used to check the integrity of the file. More algorithms can be added
 with relative ease. All of the usual file attributes can also be checked
 for inconsistencies.
 .
 This package contains base and configuration files that are needed to
 run the actual binaries.
 .
 You will almost certainly want to tweak the configuration file in
 /etc/aide/aide.conf or drop your own config snippets into
 /etc/aide/aide.conf.d.

aide-dbgsym: debug symbols for aide
aide-dynamic: Advanced Intrusion Detection Environment - dynamic binary

 AIDE is an intrusion detection system that detects changes to files on
 the local system. It creates a database from the regular expression rules
 that it finds from the config file. Once this database is initialized
 it can be used to verify the integrity of the files. It has several
 message digest algorithms (md5, sha1, rmd160, tiger, haval, etc.) that are
 used to check the integrity of the file. More algorithms can be added
 with relative ease. All of the usual file attributes can also be checked
 for inconsistencies.
 .
 This package contains a dynamically linked binary and should only be
 used in exeptional circumstances. To avoid exposure to trojaned
 libraries, it is advised to use one of the statically linked binaries.

aide-dynamic-dbgsym: debug symbols for aide-dynamic
aide-xen: Advanced Intrusion Detection Environment - static binary for XEN

 AIDE is an intrusion detection system that detects changes to files on
 the local system. It creates a database from the regular expression rules
 that it finds from the config file. Once this database is initialized
 it can be used to verify the integrity of the files. It has several
 message digest algorithms (md5, sha1, rmd160, tiger, haval, etc.) that are
 used to check the integrity of the file. More algorithms can be added
 with relative ease. All of the usual file attributes can also be checked
 for inconsistencies.
 .
 This package contains the statically linked binary for XEN-enabled
 systems and should be used in Dom0 and DomU.

aide-xen-dbgsym: debug symbols for aide-xen