RHBA-2010:0036 - Bug Fix Advisory

Topic

An updated aide package that allows proper operation with the recently
updated version of libgcrypt and makes minor man page changes is now
available.

Description

Advanced Intrusion Detection Environment (AIDE) is a program that creates a
database of files on a system, and then uses that database to ensure file
integrity and detect system intrusions.

This updated aide package includes the following fixes:

• the current version of libcgrypt includes a version-checking

initialization step that aide was not doing. Running "aide -i" logged the
following message to /var/log/messages:

aide: Libgcrypt warning: missing initialization - please fix the
application

With this update, aide now includes the version-checking step required by
libgcrypt and the libgcrypt warning is, consequently, no longer written to
/var/log/messages. Note: although based on a proposed upstream patch, this
update leaves secure memory enabled, unlike the proposed upstream change.
(BZ#530485)

• the FILES section of the aide man page previously listed the locations

for aide.conf, aide.db.gz and aide.db.new.gz with a pre-pended "%prefix"
variable. The updated aide man page removes this variable, listing the file
locations as complete but plain paths (eg "/etc/aide.conf"). (No BZ#)

All aide users are advised to upgrade to this updated package, which
includes this bug fix and man page change.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 530485 - aide: Libgcrypt warning: missing initialization

CVEs

(none)

References

(none)