[SECURITY] Fedora 20 Update: file-5.19-7.fc20

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-13571
2014-10-27 02:21:35
--------------------------------------------------------------------------------

Name        : file
Product     : Fedora 20
Version     : 5.19
Release     : 7.fc20
URL         : http://www.darwinsys.com/file/
Summary     : A utility for determining file types
Description :
The file command is used to identify a particular file according to the
type of data contained by the file.  File can identify many different
file types, including ELF binaries, system libraries, RPM packages, and
different graphics formats.

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2014-3710
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 23 2014 Jan Kaluza <jkaluza at redhat.com> - 5.19-7
- fix #1155464 - fix for CVE-2014-3710
* Wed Sep  3 2014 Jan Kaluza <jkaluza at redhat.com> - 5.19-6
- fix #1134580 - detect Mach-O universal binary
* Wed Sep  3 2014 Jan Kaluza <jkaluza at redhat.com> - 5.19-5
- fix #1101404 - remove weak Pascal patterns
- fix #1107995 - detect locale-archive
- fix #1130693, #1115111 - fix detection of MSOOXML, OOXML and ZIP
- fix #1124940 - detect Python 3.4 byte-compiled files
* Fri Aug 22 2014 Jan Kaluza <jkaluza at redhat.com> - 5.19-4
- fix #1132787 - CVE-2014-3587
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 5.19-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jul 12 2014 Tom Callaway <spot at fedoraproject.org> - 5.19-2
- fix license handling
* Wed Jun 25 2014 Jan Kaluza <jkaluza at redhat.com> - 5.19-1
- fix #1011789 - update to version 5.19
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 5.14-22
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue May 27 2014 Kalev Lember <kalevlember at gmail.com> - 5.14-21
- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
* Tue Mar 25 2014 Jan Kaluza <jkaluza at redhat.com> - 5.14-20
- fix #1079847 - fix potential regression in Perl detection caused
  by original patch for CVE-2013-7345
* Mon Mar 24 2014 Jan Kaluza <jkaluza at redhat.com> - 5.14-19
- fix redefinition of OFFSET_OOB in CVE-2014-2270 patch
* Mon Mar 24 2014 Jan Kaluza <jkaluza at redhat.com> - 5.14-18
- fix #1079847 - fix for CVE-2013-7345
- fix #1080450 - remove *.orig files before compiling magic/Magdir
* Fri Mar  7 2014 Jan Kaluza <jkaluza at redhat.com> - 5.14-17
- fix #1073555 - fix for CVE-2014-2270
* Tue Feb 25 2014 Jan Kaluza <jkaluza at redhat.com> - 5.14-16
- fix potential memory leak introduced in previous commit
* Tue Feb 18 2014 Jan Kaluza <jkaluza at redhat.com> - 5.14-15
- fix #1065837 - fix for CVE-2014-1943
* Wed Jan 15 2014 Jan Kaluza <jkaluza at redhat.com> - 5.14-14
- fix #1051598 - reverse the order of shebang vs. package keyword detection
  in Perl by increasing strength of all Perl patterns
* Mon Sep  9 2013 Jan Kaluza <jkaluza at redhat.com> - 5.14-13
- fix #1001689 - fix segfault when calling magic_load twice
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1155071 - CVE-2014-3710 file: out-of-bounds read in elf note headers
        https://bugzilla.redhat.com/show_bug.cgi?id=1155071
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update file' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------