Format: 1.8
Date: Wed, 13 Jun 2018 14:45:30 -0400
Source: file
Binary: file file-dbg libmagic1 libmagic-dev python-magic python3-magic
Architecture: arm64
Version: 1:5.14-2ubuntu3.4
Distribution: trusty
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-024.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 file       - Determines file type using "magic" numbers
 file-dbg   - Determines file type using "magic" numbers (debug)
 libmagic-dev - File type determination library using "magic" numbers (developmen
 libmagic1  - File type determination library using "magic" numbers
 python-magic - File type determination library using "magic" numbers (Python bin
 python3-magic - File type determination library using "magic" numbers (Python 3 b
Changes: 
 file (1:5.14-2ubuntu3.4) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: denial of service via large number of notes or long
     string
     - debian/patches/CVE-2014-962x-pre*.patch: backport pre-requisite code
       changes.
     - debian/patches/CVE-2014-962x-1.patch: add a limit to the number of
       ELF notes processed in doc/file.man, doc/libmagic.man,
       src/apprentice.c, src/elfclass.h, src/file.c, src/file.h,
       src/file_opts.h, src/magic.c, src/magic.h.in, src/readelf.c.
     - debian/patches/CVE-2014-962x-2.patch: limit string printing to 100
       chars, and add flags in src/readelf.c.
     - CVE-2014-9620
     - CVE-2014-9621
   * SECURITY UPDATE: denial of service via crafted ELF file
     - debian/patches/CVE-2014-9653.patch: bail out on partial reads in
       src/readelf.c.
     - CVE-2014-9653
   * SECURITY UPDATE: memory corruption in file_check_mem.
     - debian/patches/CVE-2015-8865.patch: properly calculate length in
       src/funcs.c.
     - CVE-2015-8865
   * SECURITY UPDATE: out-of-bounds read via crafted ELF file
     - debian/patches/CVE-2018-10360.patch: add bounds check to
       src/readelf.c.
     - CVE-2018-10360
Checksums-Sha1: 
 d365e584bc296f7fcb8ef3fe7e10b55608ffd49e 19470 file_5.14-2ubuntu3.4_arm64.deb
 07bb87d80ec457d9dc7849d05f462ecd3ed95245 138372 file-dbg_5.14-2ubuntu3.4_arm64.deb
 379edfa42d2615a4139e2631c03671ea32fb0b70 177650 libmagic1_5.14-2ubuntu3.4_arm64.deb
 7b774af811de2011c193a430a6c200e51221b34a 58890 libmagic-dev_5.14-2ubuntu3.4_arm64.deb
 bcd0b5b7810bd03247045a11ff31a7d202c06ac8 924 file-dbgsym_5.14-2ubuntu3.4_arm64.ddeb
 fd63858e920cda8ec41ac1bdbda889d1d5d38b7f 880 libmagic1-dbgsym_5.14-2ubuntu3.4_arm64.ddeb
 06cf412f70861f1708e9011a251a14e42697b554 902 libmagic-dev-dbgsym_5.14-2ubuntu3.4_arm64.ddeb
Checksums-Sha256: 
 96abde7d6c8a1d382fa8d8ad267d2c259dd0ff77ccf6869e060d7263e2cd3ca2 19470 file_5.14-2ubuntu3.4_arm64.deb
 967b19516f1f194e318411ff31eefe44f8f61141bce952847bf4633cb7d69a3a 138372 file-dbg_5.14-2ubuntu3.4_arm64.deb
 6fc6aebed7ca674022287efaf6a4c76e4f4522478f0bff811156d602da6cb30d 177650 libmagic1_5.14-2ubuntu3.4_arm64.deb
 a08ec84b33e28a22c3f17484a330cdb3269faa09595294be49f5afb9621bb522 58890 libmagic-dev_5.14-2ubuntu3.4_arm64.deb
 4c7d3364921503ea3b04e9612f1c79f0b5de20514d5a07542d80b88ec130096f 924 file-dbgsym_5.14-2ubuntu3.4_arm64.ddeb
 0568e090bf33ebf5389446025464426706ff2e99477ab5998cde49c81b7b6126 880 libmagic1-dbgsym_5.14-2ubuntu3.4_arm64.ddeb
 99b3ffdc53ba3fab0e98a75e57b633a13ef01874299cb16264f62980347e49a3 902 libmagic-dev-dbgsym_5.14-2ubuntu3.4_arm64.ddeb
Files: 
 ba24456bb81f5dd76c87257488d54ff8 19470 utils standard file_5.14-2ubuntu3.4_arm64.deb
 93cab489b029110829ad6e6aefac01c4 138372 debug extra file-dbg_5.14-2ubuntu3.4_arm64.deb
 bd09fee377d9eff5480c539b121c459c 177650 libs standard libmagic1_5.14-2ubuntu3.4_arm64.deb
 8681e6567aa7a4a47924128c99bd8034 58890 libdevel optional libmagic-dev_5.14-2ubuntu3.4_arm64.deb
 729706bb655b62e214fde7d6a972c793 924 utils extra file-dbgsym_5.14-2ubuntu3.4_arm64.ddeb
 69e2632a06ff5dede6612c207e38752c 880 libs extra libmagic1-dbgsym_5.14-2ubuntu3.4_arm64.ddeb
 6ab3084b945c5804469c3dfe82d6f282 902 libdevel extra libmagic-dev-dbgsym_5.14-2ubuntu3.4_arm64.ddeb
Original-Maintainer: Luk Claes <luk@debian.org>