==========================================================================
Ubuntu Security Notice USN-4172-1
October 30, 2019
file vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 19.10
– Ubuntu 19.04
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
Summary:
file could be made to crash or run programs if it opened a specially
crafted file.
Software Description:
– file: Tool to determine file types
Details:
It was discovered that file incorrectly handled certain malformed files. An
attacker could use this issue to cause a denial of service, or possibly
execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.10:
file 1:5.37-5ubuntu0.1
libmagic1 1:5.37-5ubuntu0.1
Ubuntu 19.04:
file 1:5.35-4ubuntu0.1
libmagic1 1:5.35-4ubuntu0.1
Ubuntu 18.04 LTS:
file 1:5.32-2ubuntu0.3
libmagic1 1:5.32-2ubuntu0.3
Ubuntu 16.04 LTS:
file 1:5.25-2ubuntu1.3
libmagic1 1:5.25-2ubuntu1.3
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4172-1
CVE-2019-18218
Package Information:
https://launchpad.net/ubuntu/+source/file/1:5.37-5ubuntu0.1
https://launchpad.net/ubuntu/+source/file/1:5.35-4ubuntu0.1
https://launchpad.net/ubuntu/+source/file/1:5.32-2ubuntu0.3
https://launchpad.net/ubuntu/+source/file/1:5.25-2ubuntu1.3
—–BEGIN PGP SIGNATURE—–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=VLsI
—–END PGP SIGNATURE—–
—
