USN-3911-2
file regression
USN-3911-1 fixed vulnerabilities in file. One of the backported security fixes introduced a regression that caused the interpreter string to be truncated. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that file incorrectly handled certain malformed ELF files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.
What each source reports
OSV No score
file regression
USN-3911-1 fixed vulnerabilities in file. One of the backported security fixes introduced a regression that caused the interpreter string to be truncated. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that file incorrectly handled certain malformed ELF files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.
- Record
USN-3911-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fileUbuntu:16.04:LTS |
before 1:5.25-2ubuntu1.4, plus listed versions 1:5.22+15-2ubuntu11:5.25-2ubuntu11:5.25-2ubuntu1.11:5.25-2ubuntu1.21:5.25-2ubuntu1.3 |
1:5.25-2ubuntu1.4 |
fileUbuntu:18.04:LTS |
before 1:5.32-2ubuntu0.4, plus listed versions 1:5.32-11:5.32-21:5.32-2ubuntu0.11:5.32-2ubuntu0.21:5.32-2ubuntu0.3 |
1:5.32-2ubuntu0.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-3911-2 is a vulnerability with no CVSS score yet in file, published May 13, 2020. No source lists public exploit code. Fixed in file 1:5.25-2ubuntu1.4.