file

[Michał Kaps]

Ello,

The file(1) command contains a buffer overflow vulnerability that can be
leveraged by an attacker to execute arbitrary code under the privileges of
another user.
...
The latest version of file(1) fixes this issue and is available from
ftp://ftp.astron.com/pub/file/file-3.41.tar.gz . Specific vendors will be
shipping updated packages in the near future.

Przydalaby sie w updates/security wersja 3.41, tymbardziej ze krazy juz 
exploit na ta dziure.
-- 
Michał Kaps
FafNetowy SysAdmin