file 1:5.14-2ubuntu3.1 source package in Ubuntu
Changelog
file (1:5.14-2ubuntu3.1) trusty-security; urgency=medium
* SECURITY UPDATE: denial of service via awk rule backtracking
- debian/patches/CVE-2013-7345.patch: limit to 100 repetitions in
magic/Magdir/commands.
- CVE-2013-7345
* SECURITY UPDATE: denial of service in cdf_read_short_sector
- debian/patches/CVE-2014-0207.patch: properly calculate sizes in
src/cdf.c.
- CVE-2014-0207
* SECURITY UPDATE: denial of service in mconvert
- debian/patches/CVE-2014-3478.patch: properly handle truncated pascal
string size in src/softmagic.c.
- CVE-2014-3478
* SECURITY UPDATE: denial of service in cdf_check_stream_offset
- debian/patches/CVE-2014-3479.patch: properly calculate sizes in
src/cdf.c.
- CVE-2014-3479
* SECURITY UPDATE: denial of service in cdf_count_chain
- debian/patches/CVE-2014-3480.patch: properly calculate sizes in
src/cdf.c.
- CVE-2014-3480
* SECURITY UPDATE: denial of service in cdf_read_property_info
- debian/patches/CVE-2014-3487.patch: properly calculate sizes in
src/cdf.c.
- CVE-2014-3487
* SECURITY UPDATE: denial of service via awk rule backtracking
- debian/patches/CVE-2014-3538.patch: allow specifying lengths for
regex in src/apprentice.c, src/file.h, src/softmagic.c, adjust
existing expressions in magic/Magdir/commands, magic/Magdir/fortran,
magic/Magdir/graphviz, magic/Magdir/marc21, magic/Magdir/scientific,
magic/Magdir/troff, update manpage in doc/magic.man.
- CVE-2014-3538
* debian/patches/commands-strength.patch: reduce strength of awk rule so
it doesn't get priority over perl scripts.
-- Marc Deslauriers <email address hidden> Thu, 10 Jul 2014 09:40:56 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Trusty
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- utils
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| file_5.14.orig.tar.gz | 633.4 KiB | 461ba01dd0900a3b7c2dcd901b04903192c07887a9c1928af0be507572c77fe4 |
| file_5.14-2ubuntu3.1.debian.tar.xz | 36.2 KiB | b1865619a8553bd0c629f87ff9072ecfdac23d7b34cb28f8d84d4a644cdb5507 |
| file_5.14-2ubuntu3.1.dsc | 2.0 KiB | 29d3d065976603a38e927c074bb4824482ef9b5530f6d005dabe990899f1964d |
Available diffs
Binary packages built by this source
- file: Determines file type using "magic" numbers
File tests each argument in an attempt to classify it. There are three sets of
tests, performed in this order: filesystem tests, magic number tests, and
language tests. The first test that succeeds causes the file type to be
printed.
- file-dbg: Determines file type using "magic" numbers (debug)
File tests each argument in an attempt to classify it. There are three sets of
tests, performed in this order: filesystem tests, magic number tests, and
language tests. The first test that succeeds causes the file type to be
printed.
.
This package contains the debugging symbols.
- libmagic-dev: File type determination library using "magic" numbers (development)
This library can be used to classify files according to magic number tests. It
implements the core functionality of the file command.
.
This package contains the development files.
- libmagic1: File type determination library using "magic" numbers
This library can be used to classify files according to magic number tests. It
implements the core functionality of the file command.
- python-magic: File type determination library using "magic" numbers (Python bindings)
This library can be used to classify files according to magic number tests. It
implements the core functionality of the file command.
.
This package contains the Python bindings.
- python3-magic: File type determination library using "magic" numbers (Python 3 bindings)
This library can be used to classify files according to magic number tests. It
implements the core functionality of the file command.
.
This package contains the Python 3 bindings.
