-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 11 Aug 2025 10:07:47 +0200 Source: aide Architecture: source Version: 0.19.1-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Aide Maintainers Changed-By: Hannes von Haugwitz Changes: aide (0.19.1-2+deb13u1) trixie-security; urgency=high . * Apply upstream patch to escape control characters in report and log output (CVE-2025-54389) * Apply upstream patch to fix null pointer dereference after reading incorrectly encoded xattr attributes from database (CVE-2025-54409) Checksums-Sha1: 6c47b4e107d3929fdf3240df5a11586c0ed93f41 2453 aide_0.19.1-2+deb13u1.dsc 8cbc5c4f43da950fe13acb3f457fa7734e5ca9ca 391939 aide_0.19.1.orig.tar.gz 2f4aa64de875bad2fbd8c8f8c0787cf8f6dad977 659 aide_0.19.1.orig.tar.gz.asc 8c9a04eb7db1883920369dca5f6b359b827fa645 120752 aide_0.19.1-2+deb13u1.debian.tar.xz 2c2b1b7da45c0846d83958a98734351f6c9c24d8 7040 aide_0.19.1-2+deb13u1_amd64.buildinfo Checksums-Sha256: 147bfa4e43e3ab0bbf560416618b0c20dc6f371ea6a94ce9034f902fdd3ead3e 2453 aide_0.19.1-2+deb13u1.dsc 6df8bf5f0403d74af7dbdb91eb3c8f61fe07e964669db8cfa1ee7e4ee3e90b52 391939 aide_0.19.1.orig.tar.gz aae17a6cb4d6e1b621d3bd3088d09c28b74e721bac584228055f588b75cf7e88 659 aide_0.19.1.orig.tar.gz.asc f48d406d93de5bafccfc3fbde1efffc9c34e96ace0f059a6d91036477bb588e6 120752 aide_0.19.1-2+deb13u1.debian.tar.xz 55bcdf6888468b9b5754e2af65a8a4266fdc076542051564761bf060a1742273 7040 aide_0.19.1-2+deb13u1_amd64.buildinfo Files: aae8a3a39ceaf93168cc516817f273e1 2453 admin optional aide_0.19.1-2+deb13u1.dsc aa5ebb7528888de4f44a4d8d6171a874 391939 admin optional aide_0.19.1.orig.tar.gz 854af8b9466c500ae21fb9ce1c80f192 659 admin optional aide_0.19.1.orig.tar.gz.asc 54f70a8b60f7b4686b63c38c1bade76d 120752 admin optional aide_0.19.1-2+deb13u1.debian.tar.xz e5b42f6df72c0dbefd6a349955d1228b 7040 admin optional aide_0.19.1-2+deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEVJXNoXyawXqyOEGnGO6GOGAi71cFAmiZptMACgkQGO6GOGAi 71er8gv/Z4sK2LXcAnqnGGvrUIbEhouE+Dk3qQgqgsu0ntz3DOQuRttkO6dBjsQ+ eqg0fZyiK0azEO98bRlTP5cpYnW8RS2duomr8iLfosooh49HmnaHridLYds6u5ou 3x5rt1RxsVZj5QhXtIBZFoLXZYv3bVMPsMlA0sQefBHJhJieM0+sk3v+SFyvA6Xs os4skWWvThbnrMbBBT2m61f8Ku32yIIklX3ouPTSLcQmdYVZuge5nb+MmdhrFL3w tiSXlgq+QtqlVWAUM/h2ENOQOdur3D2qM2JnSC4KHveJj8EEmp1e/RRWaMw6u8Xk iabD72ge/w726+zkyuTyOomIDqHcZXmVvBucU7UHhbbOqJQloblUV136U8tNaEHA 9UiNauP5B5VsKjH2iVq52AT46Tu898x6468keOJtcYq7pUtVwIbLxUqqG3nXavCz oP8Kk5HjOltikUHZiu7r6dV5jfRNnz2kIo9XPZysbCe7y5GyeNf98vdAaUSrytQs DaSrP2L9 =uOYp -----END PGP SIGNATURE-----