https://github.com/file/file/commit/a642587a9c9e2dd7feacdf513c3643ce26ad3c22.patch
The leading part of the patch starting at line 27 was trimmed off.
This patch should be OK to drop with file@5.35.

From a642587a9c9e2dd7feacdf513c3643ce26ad3c22 Mon Sep 17 00:00:00 2001
From: Christos Zoulas <christos@zoulas.com>
Date: Sat, 9 Jun 2018 16:00:06 +0000
Subject: [PATCH] Avoid reading past the end of buffer (Rui Reis)

---
 src/readelf.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/readelf.c b/src/readelf.c
index 79c83f9f5..1f41b4611 100644
--- a/src/readelf.c
+++ b/src/readelf.c
@@ -842,7 +842,8 @@ do_core_note(struct magic_set *ms, unsigned char *nbuf, uint32_t type,
 
 				cname = (unsigned char *)
 				    &nbuf[doff + prpsoffsets(i)];
-				for (cp = cname; *cp && isprint(*cp); cp++)
+				for (cp = cname; cp < nbuf + size && *cp
+				    && isprint(*cp); cp++)
 					continue;
 				/*
 				 * Linux apparently appends a space at the end
></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=b49fd5daabefe7e89a839b03d8acd90e95c4275f'>refs</a><a class='active' href='/guix/log/.guix-authorizations'>log</a><a href='/guix/tree/.guix-authorizations?id=b49fd5daabefe7e89a839b03d8acd90e95c4275f'>tree</a><a href='/guix/commit/.guix-authorizations?id=b49fd5daabefe7e89a839b03d8acd90e95c4275f'>commit</a><a href='/guix/diff/.guix-authorizations?id=b49fd5daabefe7e89a839b03d8acd90e95c4275f'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/.guix-authorizations'>
<input type='hidden' name='id' value='b49fd5daabefe7e89a839b03d8acd90e95c4275f'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=b49fd5daabefe7e89a839b03d8acd90e95c4275f'>root</a>/<a href='/guix/log/.guix-authorizations?id=b49fd5daabefe7e89a839b03d8acd90e95c4275f'>.guix-authorizations</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/.guix-authorizations?id=b49fd5daabefe7e89a839b03d8acd90e95c4275f&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-03-24 12:15:38 -0400'>2023-03-24</span></td><td><a href='/guix/commit/.guix-authorizations?id=33bb60fe0208e1c6167619e1971222d86c48b8dd'>.guix-authorizations: Remove Paul Garlick due to inactivity.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .guix-authorizations: Remove from pgarlick.
</span></span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2023-03-24 12:15:38 -0400'>2023-03-24</span></td><td><a href='/guix/commit/.guix-authorizations?id=703ee77115aa35f6e4736d5cc5726ab839e76899'>.guix-authorizations: Remove Jakub Kądziołka due to inactivity.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .guix-authorizations: Remove niedzejkob.
</span></span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2023-03-24 12:15:38 -0400'>2023-03-24</span></td><td><a href='/guix/commit/.guix-authorizations?id=169e60801db4360b9ea0f7d8faef21b29f8961f4'>.guix-authorizations: Remove Chris Marusich due to inactivity.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .guix-authorizations: Remove marusich.
</span></span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2023-03-24 12:15:38 -0400'>2023-03-24</span></td><td><a href='/guix/commit/.guix-authorizations?id=d873903edc5f840cf8866b6c3d3d1f50779643bb'>.guix-authorizations: Remove Brice Waegeneire due to inactivity.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .guix-authorizations: Remove bricewge.
</span></span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2023-03-24 12:15:38 -0400'>2023-03-24</span></td><td><a href='/guix/commit/.guix-authorizations?id=5d70500acbef52958d3959d7e36c2ca8288552f2'>.guix-authorizations: Remove Alex Kost due to inactivity.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .guix-authorizations: Remove alezost.
</span></span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2022-12-11 01:00:01 +0100'>2022-12-11</span></td><td><a href='/guix/commit/.guix-authorizations?id=6bb9424f22239a0a2f50133f8051c635bf9a409a'>.guix-authorizations: Authorise John Kehayias.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .guix-authorizations (podiki): Add OpenPGP key fingerprint.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2022-11-08 08:52:22 -0500'>2022-11-08</span></td><td><a href='/guix/commit/.guix-authorizations?id=96ae718c516a289124a0b91ceeef78b20d187825'>authorizations: Remove old key for "davexunit".</a><span class='msg-avail'>...<span class='msg-tooltip'>* .guix-authorizations ("davexunit"): Remove.
("davexunit (2nd)"): Rename to "dthompson".
</span></span></td><td>David Thompson</td></tr>