AIDE improper output neutralization vulnerability

AIDE is an advanced intrusion detection environment. Prior to version0.19.2, there is an improper output neutralization vulnerability in AIDE.An attacker can craft a malicious filename by including terminal escapesequences to hide the addition or removal of the file from the reportand/or tamper with the log output. A local user might exploit this tobypass the AIDE detection of malicious files. Additionally the output ofextended attribute key names and symbolic links targets are also notproperly neutralized. This issue has been patched in version 0.19.2. Aworkaround involves configuring AIDE to write the report output to aregular file, redirecting stdout to a regular file, or redirecting the logoutput written to stderr to a regular file.

Where it's fixed