Ubuntu: USN-2162-1 Critical: file Denial of Service Issue

ubuntu

April 7, 2014

File could be made to crash if it processed a specially crafted file.

Summary

File could be made to crash if it processed a specially crafted file.

Software Description:

- file: Tool to determine file types

Details:

It was discovered that file incorrectly handled PE executable files. An

attacker could use this issue to cause file to crash, resulting in a denial

of service.

Topics Covered

security advisory denial of service software update ubuntu file crash file vulnerability

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  file                            5.11-2ubuntu4.2
  libmagic1                       5.11-2ubuntu4.2

Ubuntu 12.10:
  file                            5.11-2ubuntu0.2
  libmagic1                       5.11-2ubuntu0.2

Ubuntu 12.04 LTS:
  file                            5.09-2ubuntu0.3
  libmagic1                       5.09-2ubuntu0.3

Ubuntu 10.04 LTS:
  file                            5.03-5ubuntu1.2
  libmagic1                       5.03-5ubuntu1.2

In general, a standard system update will make all the necessary changes.