OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-07:04.file

From: Bill Moran (wmorancollaborativefusion.com)
Date: Thu May 24 2007 - 09:39:33 CDT


In response to "Dag-Erling Smørgrav" <desdes.no>:

> "Brian A. Seklecki" <bsekleckicollaborativefusion.com> writes:
> > I'll have to check, but I doubt anything other than file(1) on
> > production systems is linked against libmagic. This is safe to do in
> > real-time afaik. ~BAS
>
> AFAIK, Apache's mod_mime_magic either links against libmagic or against
> its own copy of the same code.

According to the docs:
http://httpd.apache.org/docs/2.2/mod/mod_mime_magic.html

It would appear that Apache uses its own code for mod_mime_magic.

That does not guarantee that it doesn't have the same problem, however.

--
Bill Moran
Collaborative Fusion Inc.
http://people.collaborativefusion.com/~wmoran/

wmorancollaborativefusion.com
Phone: 412-422-3463x4023
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"