[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 20 Feb 2012 12:53:15 -0500
From: "CERT(R) Coordination Center" <cert@...t.org>
To: oss-security@...ts.openwall.com
CC: "CERT(R) Coordination Center" <cert@...t.org>
Subject: Bugs in "file" program VU#621745
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi folks,
We recently pointed the CERT BFF at the ubiquitous "file" command and
found a few bugs. While we've not proven the bugs to be exploitable,
we've also not ruled out the possibility that they could be.
Fixes were committed on Feb 16, 2012:
https://github.com/glensc/file/commits/master
Thank you,
Will Dormann
=============================
Vulnerability Analyst
CERT Coordination Center
4500 Fifth Ave.
Pittsburgh, PA 15213
1-412-268-7090
=============================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iQEVAwUBT0KJh02poTkZov2QAQLBngf/ajLYJAfCtpF/KQy5/wqRghOVtTwB1O/i
toZU5zE15t5MbY8Kmy85GUQsUUTH7tYlvJF83H7htD3eWCKveNM38rxB6ho6ZyPD
b+m55l4VyTgGN9EJefzuqNk9spcUnsIfHSRMqT7VNdcr9+R18GQjE750FwW/nl7R
KPJeoc96cA8Fvx+0kLSiYfJMmJL/SakC+4DjT9gEU774HlyMU14piny1i1a+nGAz
I/KXcCHfM6xU/5po6MOH8RRgChZDzwz5Yw8m23oHc5YsxRyS1igrbEtwVFLYNbz9
izWwIqde2wNxg3HsC0CYuhd49gxBf/gsG43OGMsfhV0tqtcjUnfgEw==
=zqku
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
