file 1:5.20-1ubuntu2 source package in Ubuntu

Changelog

file (1:5.20-1ubuntu2) vivid; urgency=medium

  * SECURITY UPDATE: DoS via insufficient note headers
    - debian/patches/CVE-2014-3710.patch: handle running out of not headers
      in src/readelf.c.
    - CVE-2014-3710
  * SECURITY UPDATE: DoS in ELF parser
    - debian/patches/CVE-2014-8116.patch: limit number of headers and
      capabilities in src/elfclass.h, src/readelf.c.
    - CVE-2014-8116
  * SECURITY UPDATE: DoS via missing recursion limits
    - debian/patches/CVE-2014-8117.patch: lower recursion level and allow
      it to be set from the command line in src/apprentice.c, src/file.c,
      src/file.h, src/file_opts.h, src/funcs.c, src/magic.c,
      src/magic.h.in, src/softmagic.c, add new option to documentation in
      doc/file.man, doc/libmagic.man.
    - CVE-2014-8117
  * SECURITY UPDATE: DoS via long pascal strings
    - debian/patches/pr398-truncate-pascal-strings.patch: correctly
      calculate size in src/softmagic.c.
    - No CVE number
  * debian/libmagic1.symbols: added new symbols
 -- Marc Deslauriers <email address hidden>   Tue, 27 Jan 2015 08:28:35 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Vivid
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
file_5.20.orig.tar.xz 513.7 KiB c5c31a8033fd52cccb170427a0dcb7c18c5219b356417764f25ea825a7bb4e02
file_5.20-1ubuntu2.debian.tar.xz 33.8 KiB 3c89bf327505b77eb772ec6007054a8b3d5c0ca83dd26004a399bddf4138889c
file_5.20-1ubuntu2.dsc 2.1 KiB 3b2a871b88a89425a5886ba968fccf7d1379d30869e7e18919748220411c60b1

View changes file

Binary packages built by this source

file: No summary available for file in ubuntu wily.

No description available for file in ubuntu wily.

file-dbg: No summary available for file-dbg in ubuntu wily.

No description available for file-dbg in ubuntu wily.

libmagic-dev: No summary available for libmagic-dev in ubuntu vivid.

No description available for libmagic-dev in ubuntu vivid.

libmagic1: No summary available for libmagic1 in ubuntu vivid.

No description available for libmagic1 in ubuntu vivid.

python-magic: No summary available for python-magic in ubuntu vivid.

No description available for python-magic in ubuntu vivid.

python3-magic: No summary available for python3-magic in ubuntu vivid.

No description available for python3-magic in ubuntu vivid.