Date: Thu, 24 May 2007 10:39:33 -0400 From: Bill Moran <wmoran@collaborativefusion.com> To: "=?ISO-8859-1?Q?\"Dag-Erling_Sm=F8rgrav\"?=" <des@des.no> Cc: freebsd-security@freebsd.org, "Brian A. Seklecki" <bseklecki@collaborativefusion.com> Subject: Re: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-07:04.file Message-ID: <20070524103933.98340818.wmoran@collaborativefusion.com> In-Reply-To: <86myzugx5r.fsf@dwp.des.no> References: <200705231619.l4NGJtHB017927@freefall.freebsd.org> <1179937542.1121.4.camel@soundwave.pgh.priv.collaborativefusion.com> <86myzugx5r.fsf@dwp.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
In response to "Dag-Erling Sm=F8rgrav" <des@des.no>: > "Brian A. Seklecki" <bseklecki@collaborativefusion.com> writes: > > I'll have to check, but I doubt anything other than file(1) on > > production systems is linked against libmagic. This is safe to do in > > real-time afaik. ~BAS >=20 > AFAIK, Apache's mod_mime_magic either links against libmagic or against > its own copy of the same code. According to the docs: http://httpd.apache.org/docs/2.2/mod/mod_mime_magic.html It would appear that Apache uses its own code for mod_mime_magic. That does not guarantee that it doesn't have the same problem, however. --=20 Bill Moran Collaborative Fusion Inc. http://people.collaborativefusion.com/~wmoran/ wmoran@collaborativefusion.com Phone: 412-422-3463x4023
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070524103933.98340818.wmoran>