shield Security update for file

SUSE-SLE-SERVER-12-SP4-2019-839

This update for file fixes the following issues: The following security vulnerabilities were addressed: - Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974 CVE-2018-10360). - CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118) - CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119) - CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)

• Release Date
  Apr 2 2019
• References
  Bugzilla: 1096984, 1096974, 1126119, 1126117, 1126118
  CVEs: CVE-2018-10360, CVE-2019-8905, CVE-2019-8907, CVE-2019-8906
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  file
  A Tool to Determine File Types

  5.22-10.12.2

  lock rpm

  lock src

  file-magic
  The magic files for libmagic to use

  5.22-10.12.2

  lock rpm

  libmagic1
  Library with file's functionality

  5.22-10.12.2

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  file
  A Tool to Determine File Types

  5.22-10.12.2

  lock rpm

  lock src

  file-magic
  The magic files for libmagic to use

  5.22-10.12.2

  lock rpm

  libmagic1
  Library with file's functionality

  5.22-10.12.2

  lock rpm

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  file
  A Tool to Determine File Types

  5.22-10.12.2

  lock rpm

  lock src

  file-magic
  The magic files for libmagic to use

  5.22-10.12.2

  lock rpm

  libmagic1
  Library with file's functionality

  5.22-10.12.2

  lock rpm

  libmagic1-32bit
  Library with file's functionality

  5.22-10.12.2

  lock rpm

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  file
  A Tool to Determine File Types

  5.22-10.12.2

  lock rpm

  lock src

  file-magic
  The magic files for libmagic to use

  5.22-10.12.2

  lock rpm

  libmagic1
  Library with file's functionality

  5.22-10.12.2

  lock rpm

  libmagic1-32bit
  Library with file's functionality

  5.22-10.12.2

  lock rpm