Red Hat Security AdvisoryRHSA-2020:1022
file security update
Released 2020-03-31 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) file-5.11-36.el7, file-libs-5.11-36.el7, python-magic-5.11-36.el7
- Red Hat Enterprise Linux Client Optional (v. 7) file-devel-5.11-36.el7, file-static-5.11-36.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) file-5.11-36.el7, file-libs-5.11-36.el7, python-magic-5.11-36.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) file-devel-5.11-36.el7, file-static-5.11-36.el7
- Red Hat Enterprise Linux Server (v. 7) file-5.11-36.el7, file-libs-5.11-36.el7, file-libs-5.11-36.el7.ppc +1
- Red Hat Enterprise Linux Server Optional (v. 7) file-devel-5.11-36.el7, file-devel-5.11-36.el7.ppc, file-static-5.11-36.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) file-5.11-36.el7, file-libs-5.11-36.el7, python-magic-5.11-36.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) file-devel-5.11-36.el7, file-static-5.11-36.el7
Fixes 1 record
Priority LOW 35
The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0341 · Published 2018-06-11 · Partial fix CWE-125
