Search for packages
Package details: pkg:alpm/archlinux/file@5.35-1
purl pkg:alpm/archlinux/file@5.35-1
Next non-vulnerable version 5.36-1
Latest non-vulnerable version 5.38-1
Risk 4.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-3612-mxuh-aaah
Aliases:
CVE-2019-8905
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
5.36-1
Affected by 0 other vulnerabilities.
VCID-4d93-8eka-aaaj
Aliases:
CVE-2019-8904
do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.
5.36-1
Affected by 0 other vulnerabilities.
VCID-d856-9dkk-aaaj
Aliases:
CVE-2019-8906
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
5.36-1
Affected by 0 other vulnerabilities.
VCID-gmc9-mppa-aaas
Aliases:
CVE-2019-8907
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
5.36-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:45:58.484756+00:00 Arch Linux Importer Affected by VCID-4d93-8eka-aaaj https://security.archlinux.org/AVG-907 36.0.0
2025-03-28T07:45:58.463979+00:00 Arch Linux Importer Affected by VCID-3612-mxuh-aaah https://security.archlinux.org/AVG-907 36.0.0
2025-03-28T07:45:58.443433+00:00 Arch Linux Importer Affected by VCID-d856-9dkk-aaaj https://security.archlinux.org/AVG-907 36.0.0
2025-03-28T07:45:58.422890+00:00 Arch Linux Importer Affected by VCID-gmc9-mppa-aaas https://security.archlinux.org/AVG-907 36.0.0
2024-09-18T02:01:01.424813+00:00 Arch Linux Importer Affected by VCID-4d93-8eka-aaaj https://security.archlinux.org/AVG-907 34.0.1
2024-09-18T02:01:01.401821+00:00 Arch Linux Importer Affected by VCID-3612-mxuh-aaah https://security.archlinux.org/AVG-907 34.0.1
2024-09-18T02:01:01.377439+00:00 Arch Linux Importer Affected by VCID-d856-9dkk-aaaj https://security.archlinux.org/AVG-907 34.0.1
2024-09-18T02:01:01.354457+00:00 Arch Linux Importer Affected by VCID-gmc9-mppa-aaas https://security.archlinux.org/AVG-907 34.0.1
2024-01-03T22:27:17.706007+00:00 Arch Linux Importer Affected by VCID-4d93-8eka-aaaj https://security.archlinux.org/AVG-907 34.0.0rc1
2024-01-03T22:27:17.682009+00:00 Arch Linux Importer Affected by VCID-3612-mxuh-aaah https://security.archlinux.org/AVG-907 34.0.0rc1
2024-01-03T22:27:17.660596+00:00 Arch Linux Importer Affected by VCID-d856-9dkk-aaaj https://security.archlinux.org/AVG-907 34.0.0rc1
2024-01-03T22:27:17.638238+00:00 Arch Linux Importer Affected by VCID-gmc9-mppa-aaas https://security.archlinux.org/AVG-907 34.0.0rc1