Skip to content
OpenAdvisories
Medium RHSA-2014:1606 7 CVEs

Red Hat Security Advisory: file security and bug fix update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client file 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::client file-debuginfo 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::client file-devel 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::client file-libs 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::client file-static 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::client python-magic 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file-debuginfo 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file-devel 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file-libs 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file-static 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode python-magic 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::server file 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::server file-debuginfo 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::server file-devel 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::server file-libs 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::server file-static 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::server python-magic 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file-debuginfo 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file-devel 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file-libs 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file-static 0:5.04-21.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation python-magic 0:5.04-21.el6

Vulnerabilities 7

  • Medium 6.5
    CVE-2012-1571

    file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Docum…

    file Debian
  • Medium 6.5
    CVE-2014-3480 EPSS 11%

    The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-0237 EPSS 20%

    The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 al…

    php5 file Debian Ubuntu
  • Unscored —
    CVE-2014-0238 EPSS 21%

    The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 all…

    php5 file Debian Ubuntu
  • Unscored —
    CVE-2014-1943

    Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU con…

    file Debian
  • Unscored —
    CVE-2014-2270

    softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bo…

    file Debian
  • Unscored —
    CVE-2014-3479 EPSS 15%

    The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.…

    php5 file file Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=664513
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=805197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=849621
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=873997
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=884396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=980941
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1064463
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065836
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1067771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1072220
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098193
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104858
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104869
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1606.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-1571
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1571
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1571
  • report
    https://access.redhat.com/security/cve/CVE-2014-0237
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0237
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0237
  • report
    https://access.redhat.com/security/cve/CVE-2014-0238
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0238
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0238
  • report
    https://access.redhat.com/security/cve/CVE-2014-1943
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1943
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1943
  • report
    https://access.redhat.com/security/cve/CVE-2014-2270
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2270
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2270
  • report
    https://access.redhat.com/security/cve/CVE-2014-3479
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3479
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3479
  • report
    https://access.redhat.com/security/cve/CVE-2014-3480
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3480
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3480