Description
AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamper with the log output. A local user might exploit this to bypass the AIDE detection of malicious files. Additionally the output of extended attribute key names and symbolic links targets are also not properly neutralized. This issue has been patched in version 0.19.2. A workaround involves configuring AIDE to write the report output to a regular file, redirecting stdout to a regular file, or redirecting the log output written to stderr to a regular file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| aide | aide | < 0.19.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | aide | 0.19.2-1 | — |
| Debian 13 | aide | 0.19.1-2+deb13u1 | DSA-5977-1 |
| Debian 12 | aide | 0.18.3-1+deb12u4 | DSA-5977-1 |
| Debian 11 | aide | 0.17.3-4+deb11u3 | DLA-4272-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | aide | 0.18.6-2ubuntu0.1 | USN-7697-1 |
| Ubuntu 22.04 LTS | aide | 0.17.4-1ubuntu0.2 | USN-7697-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | aide | 0.16.1-1ubuntu0.1+esm1 | USN-7697-1 |
| Ubuntu Pro 18.04 LTS | aide | 0.16-3ubuntu0.1+esm1 | USN-7697-1 |
| Ubuntu Pro 16.04 LTS | aide | 0.16~a2.git20130520-3ubuntu0.1~esm2 | USN-7697-1 |
| Ubuntu Pro 14.04 LTS | aide | 0.16~a2.git20130520-2ubuntu0.1+esm2 | USN-7697-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | aide | 0.18.6-8.el10_0.2 | RHSA-2025:14592 |
| RHEL 9 | aide | 0.16-103.el9_6.2 | RHSA-2025:14493 |
| RHEL 8 | aide | 0.16-15.el8_10.2 | RHSA-2025:14573 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | aide | 0.16-100.el9_4.1 | RHSA-2025:15039 |
| RHEL 9.2 E4S | aide | 0.16-100.el9_2.1 | RHSA-2025:15038 |
| RHEL 9.0 E4S | aide | 0.16-100.el9_0.1 | RHSA-2025:15409 |
| RHEL 8.8 TUS | aide | 0.16-15.el8_8.1 | RHSA-2025:14982 |
| RHEL 8.8 E4S | aide | 0.16-15.el8_8.1 | RHSA-2025:14982 |
| RHEL 8.6 TUS | aide | 0.16-15.el8_6.1 | RHSA-2025:15058 |
| RHEL 8.6 E4S | aide | 0.16-15.el8_6.1 | RHSA-2025:15058 |
| RHEL 8.6 AUS | aide | 0.16-15.el8_6.1 | RHSA-2025:15058 |
| RHEL 8.4 EUS Long Life | aide | 0.16-14.el8_4.2 | RHSA-2025:14981 |
| RHEL 8.4 AUS | aide | 0.16-14.el8_4.2 | RHSA-2025:14981 |
| RHEL 8.2 AUS | aide | 0.16-11.el8_2.2 | RHSA-2025:14980 |
| RHEL 7 ELS | aide | 0.15.1-13.el7_9.5 | RHSA-2025:15728 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | aide | 0.18.6-8.el10_0.2 | ALSA-2025:14592 |
| AlmaLinux 9 | aide | 0.16-103.el9_6.2 | ALSA-2025:14493 |
| AlmaLinux 8 | aide | 0.16-15.el8_10.2 | ALSA-2025:14573 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | aide | 0.18.6-8.el10_0.2 | RLSA-2025:14592 |
| Rocky Linux 9 | aide | 0.16-103.el9_6.2 | RLSA-2025:14493 |
| Rocky Linux 8 | aide | 0.16-15.el8_10.2 | RLSA-2025:14573 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.1 | aide | 0.18.6-slfo.1.1_2.1 | SUSE-SU-2025:20754-1 |
| SLE Micro 6.0 | aide | 0.18.6-2.1 | SUSE-SU-2025:20657-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | aide | 0.19.2-1.1 | openSUSE-SU-2025:15474-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | aide | 0.18.6-2 | — |
| Azure Linux 2 (CBL-Mariner) | aide | 0.16-17 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | aide | 0.18.6-8.el10_0.2 | ELSA-2025-14592 |
| Oracle Linux 9 | aide | 0.16-103.el9_6.2 | ELSA-2025-14493 |
| Oracle Linux 8 | aide | 0.16-15.el8_10.2 | ELSA-2025-14573 |
| Oracle Linux 7 | aide | 0.15.1-13.0.3.el7_9.1 | ELSA-2025-15728 |
Advisories 28
- ALSA-2025:14592 Important: aide security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:14493 Important: aide security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:14573 Important: aide security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:15728 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:15409 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:15058 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:15038 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:15039 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:14981 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:14982 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:14980 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:14573 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:14592 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- RHSA-2025:14493 Red Hat Security Advisory: aide security update Red Hat Security Advisories (RHSA) · Sep 6, 2026
- USN-7697-1 aide vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- openSUSE-SU-2025:15474-1 aide-0.19.2-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20754-1 Security update for aide SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20657-1 Security update for aide SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-4272-1 aide - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-5977-1 aide - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2025-1901 Red Hat Enterprise Linux (aide): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Nov 25, 2025
- RLSA-2025:14493 Important: aide security update Rocky Linux Security Advisories · Oct 7, 2025
- RLSA-2025:14592 Important: aide security update Rocky Linux Security Advisories · Oct 3, 2025
- ELSA-2025-15728 Important: aide security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Sep 25, 2025
- RLSA-2025:14573 Important: aide security update Rocky Linux Security Advisories · Sep 8, 2025
- ELSA-2025-14592 Important: aide security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Aug 26, 2025
- ELSA-2025-14573 Important: aide security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Aug 26, 2025
- ELSA-2025-14493 Important: aide security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 25, 2025