RHBA-2014:0948 - Bug Fix Advisory

Topic

Updated aide packages that fix two bugs are now available for Red Hat Enterprise
Linux 6.

Description

Advanced Intrusion Detection Environment (AIDE) is a utility that creates a
database of files on the system, and then uses that database to ensure file
integrity and detect system intrusions.

This update fixes the following bugs:

• Previously, the AIDE utility did not handle 'prelink' files properly if the

prelink package was not installed. As a consequence, initializing the database
by running the 'aide --init' command caused errors, and the database could not
then be read with the 'aide --check' command. With this update, after running
the 'aide --init' command in the described situation, a warning massage is
displayed that prompts the user to install the prelink package first.
(BZ#806911)

• Prior to this update, the AIDE utility did not process the 'report_attributes'

parameter correctly. Consequently, running the 'aide --check' command resulted
in an incomplete report and a segmentation fault. A patch has been applied to
address this bug, and AIDE now works as expected when reporting forced
attributes. (BZ#1119759)

Users of aide are advised to upgrade to these updated packages, which fix these
bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 1119759 - aide segfaults while processing report_attributes

CVEs

(none)

References

(none)