Date: Mon, 20 Feb 2012 12:53:15 -0500 From: "CERT(R) Coordination Center" <cert@...t.org> To: oss-security@...ts.openwall.com CC: "CERT(R) Coordination Center" <cert@...t.org> Subject: Bugs in "file" program VU#621745 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks, We recently pointed the CERT BFF at the ubiquitous "file" command and found a few bugs. While we've not proven the bugs to be exploitable, we've also not ruled out the possibility that they could be. Fixes were committed on Feb 16, 2012: https://github.com/glensc/file/commits/master Thank you, Will Dormann ============================= Vulnerability Analyst CERT Coordination Center 4500 Fifth Ave. Pittsburgh, PA 15213 1-412-268-7090 ============================= -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQEVAwUBT0KJh02poTkZov2QAQLBngf/ajLYJAfCtpF/KQy5/wqRghOVtTwB1O/i toZU5zE15t5MbY8Kmy85GUQsUUTH7tYlvJF83H7htD3eWCKveNM38rxB6ho6ZyPD b+m55l4VyTgGN9EJefzuqNk9spcUnsIfHSRMqT7VNdcr9+R18GQjE750FwW/nl7R KPJeoc96cA8Fvx+0kLSiYfJMmJL/SakC+4DjT9gEU774HlyMU14piny1i1a+nGAz I/KXcCHfM6xU/5po6MOH8RRgChZDzwz5Yw8m23oHc5YsxRyS1igrbEtwVFLYNbz9 izWwIqde2wNxg3HsC0CYuhd49gxBf/gsG43OGMsfhV0tqtcjUnfgEw== =zqku -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.