Alibaba Cloud Linux 2.1903 Security Advisory: ALINUX2-SA-2022:0011

Issued: 2022-02-11
Updated: 2022-02-11

Summary

aide security update

Severity

Important

Description

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities:

CVE-2021-45417:
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

References

CVE-2021-45417SCORE:7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Updated Packages

aarch64
- aide-0.15.1-13.1.al7.1.aarch64.rpm → (download)
- aide-debuginfo-0.15.1-13.1.al7.1.aarch64.rpm → (download)
i686
- aide-0.15.1-13.1.al7.1.i686.rpm → (download)
- aide-debuginfo-0.15.1-13.1.al7.1.i686.rpm → (download)
src
- aide-0.15.1-13.1.al7.1.src.rpm → (download)
x86_64
- aide-0.15.1-13.1.al7.1.x86_64.rpm → (download)
- aide-debuginfo-0.15.1-13.1.al7.1.x86_64.rpm → (download)