Skip to content
OpenAdvisories
High ALSA-2025:14573 1 CVE

Important: aide security update

Published Aug 26, 2025 · Updated Oct 29, 2026

Summary

Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions.

Security Fix(es):

* aide: improper output neutralization enables bypassing (CVE-2025-54389)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 8 aide 0.16-15.el8_10.2

Vulnerabilities 1

  • Medium 6.2

    AIDE improper output neutralization vulnerability

    AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal o…

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-54389
  • report
    https://bugzilla.redhat.com/2388019
  • advisory
    https://errata.almalinux.org/8/ALSA-2025-14573.html