Skip to content
Heist/ feed
Back to feed
UnratedFix available

aide: Fix of CVE-2025-54389

Type: advisorySources: OSV

- CVE-2025-54389: escape control characters in report and log output to prevent terminal escape sequence injection via crafted filenames, extended attribute key names, and symbolic link targets

Products
aide
Affected versions
Not specified
Fixed versions
0.16-100.el9_2.tuxcare.els1
CVEs
CVE-2025-54389
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 10:37 UTC · Revision 1

Source evidence

aide: Fix of CVE-2025-54389

core-osv · Original source

Published 27 May 2026, 16:22 UTC

- CVE-2025-54389: escape control characters in report and log output to prevent terminal escape sequence injection via crafted filenames, extended attribute key names, and symbolic link targets

osv:CLSA-2026-1779898961

aide

Fixed versions: 0.16-100.el9_2.tuxcare.els1

Complete source record
{
  "id": "891348e99dadc29af280602574e6585e6758b814431364ba3d5e900dca4bea70",
  "url": "https://osv.dev/vulnerability/CLSA-2026-1779898961",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "aide: Fix of CVE-2025-54389",
    "summary": "- CVE-2025-54389: escape control characters in report and log output to prevent terminal escape sequence injection via crafted filenames, extended attribute key names, and symbolic link targets",
    "evidence": "osv:CLSA-2026-1779898961",
    "products": [
      {
        "name": {
          "value": "aide",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.16-100.el9_2.tuxcare.els1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CLSA-2026-1779898961",
      "aliases": [
        "CLSA-2026-1779898961"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0.16-100.el9_2.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "aide",
            "purl": "pkg:rpm/tuxcare/aide?distro=almalinux-9.2",
            "ecosystem": "TuxCare:AlmaLinux:9.2"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779898961.json"
          }
        }
      ],
      "modified": "2026-10-26T09:30:03.973498237Z",
      "provider": "osv",
      "upstream": [
        "CVE-2025-54389"
      ],
      "references": [
        "https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779898961.html"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2025-54389",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 446826,
  "published_at": "2026-05-27T16:22:46+00:00"
}