USN-439-2: file vulnerability

Releases

• Ubuntu 7.04
• Ubuntu 6.10
• Ubuntu 6.06

Details

USN-439-1 fixed a vulnerability in file. The original fix did not
fully solve the problem. This update provides a more complete solution.

Original advisory details:

Jean-Sebastien Guay-Leroux discovered that "file" did not correctly
check the size of allocated heap memory. If a user were tricked into
examining a specially crafted file with the "file" utility, a remote
attacker could execute arbitrary code with user privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 7.04

• libmagic1 - 4.19-1ubuntu2.1

Ubuntu 6.10

• libmagic1 - 4.17-2ubuntu1.2

Ubuntu 6.06

• libmagic1 - 4.16-0ubuntu3.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

References

• CVE-2007-2799