[Aide] AIDE 0.19.5 security release

Hannes von Haugwitz hannes at vonhaugwitz.com
Thu Oct 22 17:03:38 EEST 2026


AIDE version 0.19.5 was published.

You can download it from https://github.com/aide/aide/releases

Please ALWAYS verify the signature of a release file before using it (see
README[0] for details).

This is a security release.

The most noteworthy changes between v0.19.4 and v0.19.5 are:
    * Security bug fixes
      - Use memcmp to compare hashsum byte sequences
        (GHSA-6wc9-4w69-5jc5, CVE pending)
      - Always treat regexes and file names as single byte sequences
        (GHSA-wq25-fm54-5q3q, CVE pending)

Thanks to Rajesh Pangare and a community member for responsibly reporting
these issues.

The home URL of AIDE is http://aide.github.io

Best regards

Hannes

[0] https://github.com/aide/aide/blob/v0.19.5/README
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <http://www.ipi.fi/pipermail/aide/attachments/20261022/a2bd0042/attachment.sig>


More information about the Aide mailing list