file: CVE-2015-8865: file_check_mem() misbehaves on some input

Debian Bug report logs - #827377
file: CVE-2015-8865: file_check_mem() misbehaves on some input

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Petter Reinholdtsen <pere@hungry.com>

To: submit@bugs.debian.org

Subject: file: CVE-2015-8865: file_check_mem() misbehaves on some input

Date: Wed, 15 Jun 2016 15:06:37 +0200

Package: src:file
Version: 1:5.22+15-2
Severity: important

According to
<URL: https://security-tracker.debian.org/tracker/CVE-2015-8865 >, the
file package in Jessie have an open security hole.  The description look
like this:

  The file_check_mem function in funcs.c in file before 5.23, as used in
  the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and
  7.x before 7.0.5, mishandles continuation-level jumps, which allows
  context-dependent attackers to cause a denial of service (buffer
  overflow and application crash) or possibly execute arbitrary code via
  a crafted magic file.

The problem was fixed in Wheezy (DLA-460-1), but is not listed as fixed
in Jessie.  Is there problem still around in Jessie?  If not, would you
be willing to upload a update to Jessie?

As the problem is said to be fixed in version 5.23, it is no longer
present in Stretch and Sid.

-- 
Happy hacking
Petter Reinholdtsen

Message #10 received at 827377-done@bugs.debian.org (full text, mbox, reply):

From: Petter Reinholdtsen <pere@hungry.com>

To: 827377-done@bugs.debian.org

Subject: Re: Bug#827377: file: CVE-2015-8865: file_check_mem() misbehaves on some input

Date: Wed, 15 Jun 2016 15:16:52 +0200

Version: 1:5.23-1

This issue is fixed in a recent package and only unsolved in Jessie.

-- 
Happy hacking
Petter Reinholdtsen

Message #19 received at 827377@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Petter Reinholdtsen <pere@hungry.com>, 827377@bugs.debian.org

Subject: Re: Bug#827377: file: CVE-2015-8865: file_check_mem() misbehaves on some input

Date: Wed, 15 Jun 2016 17:22:10 +0200

Hi,

On Wed, Jun 15, 2016 at 03:06:37PM +0200, Petter Reinholdtsen wrote:
> The problem was fixed in Wheezy (DLA-460-1), but is not listed as fixed
> in Jessie.  Is there problem still around in Jessie?  If not, would you
> be willing to upload a update to Jessie?

It is already pending for a jessie point release, cf. #823794.

Regards,
Salvatore

Message #24 received at 827377@bugs.debian.org (full text, mbox, reply):

From: Petter Reinholdtsen <pere@hungry.com>

To: Salvatore Bonaccorso <carnil@debian.org>, 827377@bugs.debian.org

Subject: Re: Bug#827377: file: CVE-2015-8865: file_check_mem() misbehaves on some input

Date: Wed, 15 Jun 2016 20:51:35 +0200

[Salvatore Bonaccorso]
> It is already pending for a jessie point release, cf. #823794.

Ah, very good.  I see <URL: https://bugs.debian.org/823794 > was
accepted for upload 2016-05-14, and I guess it will be uploaded soon.  I
will just move on to other tasks, then. :)

-- 
Happy hacking
Petter Reinholdtsen

Message #25 received at 827377-done@bugs.debian.org (full text, mbox, reply):

From: Christoph Biedl <debian.axhn@manchmal.in-ulm.de>

To: Petter Reinholdtsen <pere@hungry.com>, 827377-done@bugs.debian.org

Subject: Re: Bug#827377: file: CVE-2015-8865: file_check_mem() misbehaves on some input

Date: Tue, 21 Jun 2016 08:11:15 +0200

[Message part 1 (text/plain, inline)]

Petter Reinholdtsen wrote...

> The problem was fixed in Wheezy (DLA-460-1), but is not listed as fixed
> in Jessie.  Is there problem still around in Jessie?  If not, would you
> be willing to upload a update to Jessie?

Thanks for the heads-up, as Salvatore mentioned this was supposed to
be handled in a jessie point release. It's now in the queue so it will
arrive in jessie shortly.

    Christoph

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.