Re: Bugs in "file" program VU#621745

[Florian Weimer <fw () deneb enyo de>]

* Kurt Seifried:

> > We recently pointed the CERT BFF at the ubiquitous "file" command
> > and found a few bugs.  While we've not proven the bugs to be
> > exploitable, we've also not ruled out the possibility that they
> > could be.
> >
> > Fixes were committed on Feb 16, 2012: 
> > https://github.com/glensc/file/commits/master

> If any of these are security issues please let me know and I will
> assign CVE #'s.

file also provides a library, libmagic.  This could lead to crashes of
server processes which use libmagic.  Debian will likely release a fix
as a security update.