Gentoo Linux Security Advisory: Integer overflow in file

file is a utility that identifies a file’s type from its contents. A recently discovered vulnerability allows an attacker to execute arbitrary code with the privileges of the user running the utility, by crafting the input to file_printf. Versions before 4.20 are affected.
Gentoo users only need to run two commands to update:
# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-apps/file-4.20"
Descriptions of the vulnerability are also available at these addresses.