Your message dated Fri, 09 Jan 2015 07:33:38 +0000
with message-id <[email protected]>
and subject line Bug#773148: fixed in file 5.04-5+squeeze9
has caused the Debian Bug report #773148,
regarding file: CVE-2014-8116 / CVE-2014-8117 recursion issues
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
773148: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773148
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
package: src:file
severity: important
version: 5.04-5
control: tag -1 patch
A couple recursion issues were discovered in file that could lead to
denial-of-service potentially:
https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc
Patches included in the freebsd advisory.
Best wishes,
Mike
--- End Message ---
--- Begin Message ---
Source: file
Source-Version: 5.04-5+squeeze9
We believe that the bug you reported is fixed in the latest version of
file, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Christoph Biedl <[email protected]> (supplier of updated file
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 09 Jan 2015 00:11:26 +0100
Source: file
Binary: file libmagic1 libmagic-dev python-magic python-magic-dbg
Architecture: source amd64
Version: 5.04-5+squeeze9
Distribution: squeeze-lts
Urgency: high
Maintainer: Christoph Biedl <[email protected]>
Changed-By: Christoph Biedl <[email protected]>
Description:
file - Determines file type using "magic" numbers
libmagic-dev - File type determination library using "magic" numbers
(developmen
libmagic1 - File type determination library using "magic" numbers
python-magic - File type determination library using "magic" numbers (Python
bin
python-magic-dbg - File type determination library using "magic" numbers
(Python bin
Closes: 773148
Changes:
file (5.04-5+squeeze9) squeeze-lts; urgency=high
.
* Fix several security issues, Closes: #773148
Checksums-Sha1:
7dfe7a9ce4b758f377d300971ba1e00e63120740 1958 file_5.04-5+squeeze9.dsc
c168320653cb189aa4df5dbe7c03aaca0caddf6f 78468 file_5.04-5+squeeze9.diff.gz
4eeb856551f3746d272f12699f29e9918d554aa3 51072 file_5.04-5+squeeze9_amd64.deb
1a7c674f9d0f197e50fec9184f46f89d447a9f3a 237888
libmagic1_5.04-5+squeeze9_amd64.deb
5887824cc461576b68778f5690ea7e2342f93e0e 110846
libmagic-dev_5.04-5+squeeze9_amd64.deb
e470633753d854d7b8f2073acd303f084c3e8e5d 39270
python-magic_5.04-5+squeeze9_amd64.deb
ea7c884ea1380052d825178275df6456be7c6438 35730
python-magic-dbg_5.04-5+squeeze9_amd64.deb
Checksums-Sha256:
20e16404210b8be931e2d0d947b664cbe4b0aadd152f7bbfb5c99913da9f277f 1958
file_5.04-5+squeeze9.dsc
3d9c8a5cc1c8329edf1ff1d6b5c13837a07516c505f5fc5ac939d1b2142fdbff 78468
file_5.04-5+squeeze9.diff.gz
5635e490ac2ddcf55f541f15f1ef4b6d9964872c12a3b2bdf7a23b37c030c33e 51072
file_5.04-5+squeeze9_amd64.deb
7e8c732a771c99d09dc4756cf97af83f02080e37479ca28961e78fc5b24f39ee 237888
libmagic1_5.04-5+squeeze9_amd64.deb
f1617ffc5f83972a24adaf173ef6598f76ccbf63a7062653adeef7b32b9b0d3d 110846
libmagic-dev_5.04-5+squeeze9_amd64.deb
0f6aa2da9b08527c85e63c93bfa3f9b3a3137a94b41cba62acbbce09b68a05ad 39270
python-magic_5.04-5+squeeze9_amd64.deb
bc348dc420c5be6782344ddd511928daee21e1b5fc5b5563b713fb9e2cb7387a 35730
python-magic-dbg_5.04-5+squeeze9_amd64.deb
Files:
9a264faf99421d487f8d48ce43a1dbae 1958 utils standard file_5.04-5+squeeze9.dsc
3a05a2c4aff5e854ab40675a5eb8ebf7 78468 utils standard
file_5.04-5+squeeze9.diff.gz
adc097800605c84a84663b4e8c4cc31a 51072 utils standard
file_5.04-5+squeeze9_amd64.deb
81eb7e2aa052eecbdc549a36695e95c7 237888 libs standard
libmagic1_5.04-5+squeeze9_amd64.deb
edebe1a8c87f324b047230f5852a7144 110846 libdevel optional
libmagic-dev_5.04-5+squeeze9_amd64.deb
fe30fad19245a9f7bf037185b5ffb297 39270 python extra
python-magic_5.04-5+squeeze9_amd64.deb
7062eb3ada4250110b67dc02e59e0051 35730 debug extra
python-magic-dbg_5.04-5+squeeze9_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=Lhnd
-----END PGP SIGNATURE-----
--- End Message ---