[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-07:04.file

Bill Moran wmoran at collaborativefusion.com
Thu May 24 14:49:39 UTC 2007


In response to "Dag-Erling Smørgrav" <des at des.no>:

> "Brian A. Seklecki" <bseklecki at collaborativefusion.com> writes:
> > I'll have to check, but I doubt anything other than file(1) on
> > production systems is linked against libmagic.  This is safe to do in
> > real-time afaik. ~BAS
> 
> AFAIK, Apache's mod_mime_magic either links against libmagic or against
> its own copy of the same code.

According to the docs:
http://httpd.apache.org/docs/2.2/mod/mod_mime_magic.html

It would appear that Apache uses its own code for mod_mime_magic.

That does not guarantee that it doesn't have the same problem, however.

-- 
Bill Moran
Collaborative Fusion Inc.
http://people.collaborativefusion.com/~wmoran/

wmoran at collaborativefusion.com
Phone: 412-422-3463x4023


More information about the freebsd-security mailing list