Уведомление безопасности SUSE-SA:2007:039

Критичная (9.3)

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

SUSE

libexif (any) libexif-32bit (any) libexif5 (any)

Уведомление безопасности об уязвимостях SUSE LINUX 10.0, SUSE LINUX 10.1, openSUSE 10.2, UnitedLinux 1.0, SuSE Linux Enterprise Server 8, SuSE Linux Openexchange Server 4, SuSE Linux Desktop 1.0, SuSE Linux Standard Server 8, SuSE Linux School Server, SUSE LINUX Retail Solution 8, SUSE SLES 9, Novell Linux Desktop 9, Open Enterprise Server, Novell Linux POS 9, SUSE Linux Enterprise Desktop 10 SP1, SLE SDK 10 SP1, SUSE Linux Enterprise Server 10 SP1

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 10.2:
ppc:
libexif5 - 0.5.12-39
libexif - 0.6.14-20
openSUSE 10.2:
x86_64:
libexif - 0.6.14-20
libexif-32bit - 0.6.14-20
libexif5 - 0.5.12-39
openSUSE 10.2:
i586:
libexif - 0.6.14-20
libexif5 - 0.5.12-39
openSUSE 10.0:
ppc:
libexif5 - 0.5.12-5.3
libexif - 0.6.13-5.6
openSUSE 10.0:
x86_64:
libexif-32bit - 0.6.13-5.6
libexif - 0.6.13-5.6
libexif5 - 0.5.12-5.3
openSUSE 10.0:
i586:
libexif5 - 0.5.12-5.3
libexif - 0.6.13-5.6
openSUSE 10.1:
ppc:
libexif5 - 0.5.12-17.7
libexif - 0.6.13-20.6
openSUSE 10.1:
x86_64:
libexif-32bit - 0.6.13-20.6
libexif5 - 0.5.12-17.7
libexif - 0.6.13-20.6
openSUSE 10.1:
i586:
libexif5 - 0.5.12-17.7
libexif - 0.6.13-20.6
SUSE Linux Enterprise Server 10 SP1:
s390x:
libexif - 0.6.13-20.6
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise 10 Software Development Kit:
ia64:
libexif5 - 0.5.12-17.7
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise 10 Software Development Kit:
ppc:
libexif5 - 0.5.12-17.7
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise 10 Software Development Kit:
s390x:
libexif5 - 0.5.12-17.7
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise 10 Software Development Kit:
i586:
libexif5 - 0.5.12-17.7
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise 10 Software Development Kit:
x86_64:
libexif5 - 0.5.12-17.7

http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00001.html

Источник: CVE
Наименование: CVE-2006-4168
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4168

Источник: CVE
Наименование: CVE-2007-2645
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2645