Red Hat Security AdvisoryRHSA-2020:2838
file security update
Released 2020-07-07 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) file-5.11-35.el7_6.1, file-libs-5.11-35.el7_6.1, python-magic-5.11-35.el7_6.1
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) file-devel-5.11-35.el7_6.1, file-static-5.11-35.el7_6.1
- Red Hat Enterprise Linux Server EUS (v. 7.6) file-5.11-35.el7_6.1, file-libs-5.11-35.el7_6.1, file-libs-5.11-35.el7_6.1.ppc +1
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) file-devel-5.11-35.el7_6.1, file-devel-5.11-35.el7_6.1.ppc, file-static-5.11-35.el7_6.1 +1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) file-5.11-35.el7_6.1, file-libs-5.11-35.el7_6.1, python-magic-5.11-35.el7_6.1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) file-devel-5.11-35.el7_6.1, file-static-5.11-35.el7_6.1
Fixes 1 record
Priority LOW 35
The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0341 · Published 2018-06-11 · Partial fix CWE-125
