Skip to content
OpenAdvisories
Unscored RHSA-2016:0760 7 CVEs

Red Hat Security Advisory: file security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client file 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::client file-debuginfo 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::client file-devel 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::client file-libs 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::client file-static 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::client python-magic 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file-debuginfo 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file-devel 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file-libs 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode file-static 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode python-magic 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::server file 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::server file-debuginfo 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::server file-devel 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::server file-libs 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::server file-static 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::server python-magic 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file-debuginfo 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file-devel 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file-libs 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation file-static 0:5.04-30.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation python-magic 0:5.04-30.el6

Vulnerabilities 7

  • Unscored —
    CVE-2014-3538 EPSS 12%

    file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attacker…

    file file Debian Ubuntu
  • Unscored —
    CVE-2014-3587 EPSS 20%

    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo componen…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3710 EPSS 14%

    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-8116

    The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or…

    file file Debian Ubuntu
  • Unscored —
    CVE-2014-8117

    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of s…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-9620

    The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of not…

    file file Debian Ubuntu
  • Unscored —
    CVE-2014-9653

    readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x b…

    file file Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Release_Notes/index.html
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Technical_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=809898
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1080453
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128587
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1154802
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1155071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1169509
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1171580
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1174606
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180639
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1190116
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1243650
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0760.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3538
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3538
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3538
  • report
    https://access.redhat.com/security/cve/CVE-2014-3587
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3587
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3587
  • report
    https://access.redhat.com/security/cve/CVE-2014-3710
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3710
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3710
  • report
    https://access.redhat.com/security/cve/CVE-2014-8116
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8116
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8116
  • report
    https://access.redhat.com/security/cve/CVE-2014-8117
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8117
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8117
  • report
    https://access.redhat.com/security/cve/CVE-2014-9620
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9620
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9620
  • report
    https://access.redhat.com/security/cve/CVE-2014-9653
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9653
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9653