file security update

CentOS Errata and Security Advisory CESA-2007:0391

The file command is used to identify a particular file according to the
type of data contained by the file.

The fix for CVE-2007-1536 introduced a new integer underflow flaw in the
file utility. An attacker could create a carefully crafted file which, if
examined by a victim using the file utility, could lead to arbitrary code
execution. (CVE-2007-2799)

This issue did not affect the version of the file utility distributed with
Red Hat Enterprise Linux 2.1 or 3.

Users should upgrade to this erratum package, which contain a backported
patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-May/075985.html
https://lists.centos.org/pipermail/centos-announce/2007-May/075986.html
https://lists.centos.org/pipermail/centos-announce/2007-May/075993.html
https://lists.centos.org/pipermail/centos-announce/2007-May/075995.html
https://lists.centos.org/pipermail/centos-announce/2007-May/076001.html
https://lists.centos.org/pipermail/centos-announce/2007-May/076002.html

Affected packages:
file

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0391