Stay Secure with the Latest Linux Advisories

security advisorydenial of servicesoftware update

Ubuntu: USN-2162-1 Critical: file Denial of Service Issue

File could be made to crash if it processed a specially crafted file.. =========================================================================Ubuntu Security Notice USN-2162-1 April 07, 2014 file vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 13.10 - Ubuntu 12.10 - Ubuntu 12.04 LTS - Ubuntu 10.04 LTS Summary: File could be made to crash if it processed a specially crafted file. Software Description: - file: Tool to determine file types Details: It was discovered that file incorrectly handled PE executable files. An attacker could use this issue to cause file to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 13.10: file 5.11-2ubuntu4.2 libmagic1 5.11-2ubuntu4.2 Ubuntu 12.10: file 5.11-2ubuntu0.2 libmagic1 5.11-2ubuntu0.2 Ubuntu 12.04 LTS: file 5.09-2ubuntu0.3 libmagic1 5.09-2ubuntu0.3 Ubuntu 10.04 LTS: file 5.03-5ubuntu1.2 libmagic1 5.03-5ubuntu1.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2162-1 CVE-2014-2270 Package Information: https://launchpad.net/ubuntu/+source/file/5.11-2ubuntu4.2 https://launchpad.net/ubuntu/+source/file/5.11-2ubuntu0.2 https://launchpad.net/ubuntu/+source/file/5.09-2ubuntu0.3 https://launchpad.net/ubuntu/+source/file/5.03-5ubuntu1.2 . The Ubuntu Security Notice USN-2162-1 highlights a vulnerability related to specific file types that may lead to a denial of service, triggered by specially designed files.. File Types, Ubuntu Security, Denial Of Service, Software Updates. .Severity: Critical. LinuxSecurity.com Team

Apr 07, 2014 •Critical Ubuntu