Format: 1.8 Date: Tue, 27 Jan 2015 09:23:18 -0500 Source: file Binary: file file-dbg libmagic1 libmagic-dev python-magic python3-magic Architecture: amd64 Version: 1:5.14-2ubuntu3.3 Distribution: trusty Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: file - Determines file type using "magic" numbers file-dbg - Determines file type using "magic" numbers (debug) libmagic-dev - File type determination library using "magic" numbers (developmen libmagic1 - File type determination library using "magic" numbers python-magic - File type determination library using "magic" numbers (Python bin python3-magic - File type determination library using "magic" numbers (Python 3 b Changes: file (1:5.14-2ubuntu3.3) trusty-security; urgency=medium . * SECURITY UPDATE: DoS via insufficient note headers - debian/patches/CVE-2014-3710.patch: handle running out of not headers in src/readelf.c. - CVE-2014-3710 * SECURITY UPDATE: DoS in ELF parser - debian/patches/CVE-2014-8116.patch: limit number of headers and capabilities in src/elfclass.h, src/readelf.c. - CVE-2014-8116 * SECURITY UPDATE: DoS via missing recursion limits - debian/patches/CVE-2014-8117.patch: lower recursion level and allow it to be set from the command line in src/apprentice.c, src/file.c, src/file.h, src/file_opts.h, src/funcs.c, src/magic.c, src/magic.h.in, src/softmagic.c, add new option to documentation in doc/file.man, doc/libmagic.man. - CVE-2014-8117 * SECURITY UPDATE: DoS via long pascal strings - debian/patches/pr398-truncate-pascal-strings.patch: correctly calculate size in src/softmagic.c. - No CVE number * debian/libmagic1.symbols: added new symbols Checksums-Sha1: a2d3939ff7ab830e899df7ff8d9d57b8d0225b7b 18926 file_5.14-2ubuntu3.3_amd64.deb 926486d609fd6a6049f540e2e746988aa2c366c4 131704 file-dbg_5.14-2ubuntu3.3_amd64.deb 541f1c4e0ad789d3ccfd672ac1e80ef7bd7b3c07 184670 libmagic1_5.14-2ubuntu3.3_amd64.deb 2245fb1c9d7adfc7dbc9199ea90e624dc5473f4f 62806 libmagic-dev_5.14-2ubuntu3.3_amd64.deb Checksums-Sha256: b44046a69ec652b82afa1f4f88db4cdfab6dfa6fa8780d935caedfeb301bb81a 18926 file_5.14-2ubuntu3.3_amd64.deb a543c51bcf1f2b2062f7ef15b1fe40b63e370d2c0df4983895299f97684953d6 131704 file-dbg_5.14-2ubuntu3.3_amd64.deb a9bb62f65d43ba999248d4b1edb13adbfa1ed1310c2cde7c383ca7793d2111df 184670 libmagic1_5.14-2ubuntu3.3_amd64.deb ac3562546c1cd0e11b948e434356873b15d1eebfe2a5a113ebe04313e00b4e5f 62806 libmagic-dev_5.14-2ubuntu3.3_amd64.deb Files: ca52ff5a7e77c98c7f74854f796b2a70 18926 utils standard file_5.14-2ubuntu3.3_amd64.deb 3d70bc60ebd7787461b192e881ceaf22 131704 debug extra file-dbg_5.14-2ubuntu3.3_amd64.deb d7c9956c9606d47493821122f0c621c4 184670 libs standard libmagic1_5.14-2ubuntu3.3_amd64.deb 08cb16f4f8fce7851cf2d235de0161d8 62806 libdevel optional libmagic-dev_5.14-2ubuntu3.3_amd64.deb Original-Maintainer: Luk Claes