Уведомление безопасности SUSE-SA:2007:039

Критичная (9.3)

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

SUSE

libexif (any) libexif-32bit (any) libexif5 (any)

Уведомление безопасности об уязвимостях SUSE LINUX 10.0, SUSE LINUX 10.1, openSUSE 10.2, UnitedLinux 1.0, SuSE Linux Enterprise Server 8, SuSE Linux Openexchange Server 4, SuSE Linux Desktop 1.0, SuSE Linux Standard Server 8, SuSE Linux School Server, SUSE LINUX Retail Solution 8, SUSE SLES 9, Novell Linux Desktop 9, Open Enterprise Server, Novell Linux POS 9, SUSE Linux Enterprise Desktop 10 SP1, SLE SDK 10 SP1, SUSE Linux Enterprise Server 10 SP1

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 10.2:
i586:
libexif - 0.6.14-20
libexif5 - 0.5.12-39
openSUSE 10.0:
i586:
libexif5 - 0.5.12-5.3
libexif - 0.6.13-5.6
openSUSE 10.1:
i586:
libexif5 - 0.5.12-17.7
libexif - 0.6.13-20.6
SUSE LINUX Desktop 1.0:
i586:
libexif - 0.5.3-114
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise Desktop 10 SP1:
x86_64:
libexif - 0.6.13-20.6
SUSE Linux Enterprise Server 9:
s390x:
libexif - 0.5.12-118.10
SUSE LINUX Enterprise Server 8:
s390x:
libexif - 0.5.3-114
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise 10 Software Development Kit:
x86_64:
libexif5 - 0.5.12-17.7
SUSE Linux Enterprise Server 10 SP1:
s390x:
libexif - 0.6.13-20.6
Novell Open Enterprise Server (OES), Novell Linux Desktop 9, SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
x86_64:
libexif - 0.5.12-118.10
libexif-32bit - 9-200706190007
SUSE LINUX Standard Server 8, SUSE LINUX Enterprise Server 8, SUSE LINUX Openexchange Server 4.0, SUSE LINUX Retail Solution 8:
x86_64:
libexif - 0.5.3-114

https://www.suse.com/support/security/advisories/2007_39_libexif.html

Источник: CVE
Наименование: CVE-2006-4168
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4168

Источник: CVE
Наименование: CVE-2007-2645
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2645