File Local Stack Overflow Code Execution Vulnerability Solution:
Sun has updated its advisory (Sun Alert ID: 56040) and has included fixes to address this issue for Sun Linux 5.0.6. Fixes for other affected Sun products are pending release.
Immunix has released a security advisory (IMNX-2003-7+-012-01) and fixes for this issue. Users are advised to upgrade as soon as possible.
SuSE has released a security advisory (SuSE-SA:2003:017) which contains fixes for this issue. Users are advised to upgrade as soon as possible.
Gentoo Linux users running sys-apps/file may upgrade to file-3.41 with the following commands:
emerge sync
emerge file
emerge clean
NetBSD Security Advisory 2003-003 has been released. Information on how to update vulnerable installations via CVS can be obtained from the attached advisory.
Trustix advisory TSL-2003-0006 contains fixes which address this issue. Please see the attached advisory for details on obtaining and applying fixes.
Fixes have been made available:
file file 3.28
file file 3.30
file file 3.32
file file 3.33
file file 3.34
file file 3.35
file file 3.36
file file 3.37
file file 3.39
file file 3.40
