==========================================================================
Ubuntu Security Notice USN-2162-1
April 07, 2014

file vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 13.10
– Ubuntu 12.10
– Ubuntu 12.04 LTS
– Ubuntu 10.04 LTS

Summary:

File could be made to crash if it processed a specially crafted file.

Software Description:
– file: Tool to determine file types

Details:

It was discovered that file incorrectly handled PE executable files. An
attacker could use this issue to cause file to crash, resulting in a denial
of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
file 5.11-2ubuntu4.2
libmagic1 5.11-2ubuntu4.2

Ubuntu 12.10:
file 5.11-2ubuntu0.2
libmagic1 5.11-2ubuntu0.2

Ubuntu 12.04 LTS:
file 5.09-2ubuntu0.3
libmagic1 5.09-2ubuntu0.3

Ubuntu 10.04 LTS:
file 5.03-5ubuntu1.2
libmagic1 5.03-5ubuntu1.2

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2162-1
CVE-2014-2270

Package Information:
https://launchpad.net/ubuntu/+source/file/5.11-2ubuntu4.2
https://launchpad.net/ubuntu/+source/file/5.11-2ubuntu0.2
https://launchpad.net/ubuntu/+source/file/5.09-2ubuntu0.3
https://launchpad.net/ubuntu/+source/file/5.03-5ubuntu1.2

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird – http://www.enigmail.net/
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=VsyV
—–END PGP SIGNATURE—–
—