Resolved Bugs
1180640 – file: limit the number of ELF notes processed [fedora-all]
1180642 – CVE-2014-9621 file: limit string printing to 100 chars
1190118 – CVE-2014-9653 file: malformed elf file causes access to uninitialized memory [fedora-all]
1174608 – CVE-2014-8116 CVE-2014-8117 file: various flaws [fedora-all]
1171580 – CVE-2014-8116 file: multiple denial of service issues (resource consumption)
1174606 – CVE-2014-8117 file: denial of service issue (resource consumption)
1180639 – CVE-2014-9620 file: limit the number of ELF notes processed
1180643 – file: limit string printing to 100 chars [fedora-all]
1190116 – CVE-2014-9653 file: malformed elf file causes access to uninitialized memory<br
Update to File-5.22. Fixes various CVE bugs.