Mageia alert MGASA-2016-0132 (file)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2016-0132: Updated file packages fix security vulnerability 
Date:
    	     
 
Wed, 6 Apr 2016 16:10:23 +0200
Message-ID:
    	     
 
<20160406141023.8E5959F640@duvel.mageia.org>
MGASA-2016-0132 - Updated file packages fix security vulnerability

Publication date: 06 Apr 2016
URL: http://advisories.mageia.org/MGASA-2016-0132.html
Type: security
Affected Mageia releases: 5

Description:
The file command was vulnerable to a buffer over-write in with a malformed
magic file.

References:
- https://bugs.mageia.org/show_bug.cgi?id=18102
- http://git.php.net/?p=php-src.git;a=commit;h=5272184a1ed0...

SRPMS:
- 5/core/file-5.19-10.1.mga5