The OpenNET Project
 
Search (keywords):  SOFT ARTICLES TIPS & TRICKS SECURITY
LINKS NEWS MAN DOCUMENTATION


[USN-654-1] libexif vulnerabilities


<< Previous INDEX Search src / Print Next >>
Date: Tue, 14 Oct 2008 17:32:47 -0700
From: Kees Cook <kees@ubuntu.com.>
To: [email protected]
Subject: [USN-654-1] libexif vulnerabilities
Message-ID: <20081015003247.GJ17241@outflux.net.>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
        protocol="application/pgp-signature"; boundary="qftxBdZWiueWNAVY"
Content-Disposition: inline
Organization: Ubuntu
X-MIMEDefang-Filter: outflux$Revision: 1.316 $
X-HELO: www.outflux.net
X-Scanned-By: MIMEDefang 2.63 on 10.2.0.1
X-Virus-Scanned: antivirus-gw at tyumen.ru


--qftxBdZWiueWNAVY
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline


Ubuntu Security Notice USN-654-1 October 14, 2008 libexif vulnerabilities CVE-2007-6351, CVE-2007-6352
A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 7.04 Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libexif12 0.6.12-2ubuntu0.3 Ubuntu 7.04: libexif12 0.6.13-5ubuntu0.3 Ubuntu 7.10: libexif12 0.6.16-1ubuntu0.1 After a standard system upgrade you need to restart your session to effect the necessary changes. Details follow: Meder Kydyraliev discovered that libexif did not correctly handle certain EXIF headers. If a user or automated system were tricked into processing a specially crafted image, a remote attacker could cause the application linked against libexif to crash, leading to a denial of service, or possibly executing arbitrary code with user privileges. Updated packages for Ubuntu 6.06 LTS: Source archives: http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif_0.6.12-2ubuntu0.3.diff.gz Size/MD5: 4765 04c7e73ecece1f9f42516b6e9c997adb http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif_0.6.12-2ubuntu0.3.dsc Size/MD5: 646 70f71ef6e2246e9a2bb4f2f02e61cc41 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif_0.6.12.orig.tar.gz Size/MD5: 537829 69501aaf0862a79aaeeb73e81e8c1306 amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.12-2ubuntu0.3_amd64.deb Size/MD5: 77784 4a873cf21ce3be25603cae7812a8b8d9 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.12-2ubuntu0.3_amd64.deb Size/MD5: 61968 2a96cfe5d19af5941a65b26a2f08b05d i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.12-2ubuntu0.3_i386.deb Size/MD5: 73040 ea5652234ef1f6ec6599537977474662 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.12-2ubuntu0.3_i386.deb Size/MD5: 57832 35743ac1e60d661fb6732b8dd6f47dc8 powerpc architecture (Apple Macintosh G3/G4/G5): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.12-2ubuntu0.3_powerpc.deb Size/MD5: 78270 b6a62e5af9be3d39e0120e1febed6c5e http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.12-2ubuntu0.3_powerpc.deb Size/MD5: 60856 9521ddaf67e4c41917d675c9c9ae5836 sparc architecture (Sun SPARC/UltraSPARC): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.12-2ubuntu0.3_sparc.deb Size/MD5: 75786 254df3e31bbaf47b992c9a91f8e33448 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.12-2ubuntu0.3_sparc.deb Size/MD5: 58816 81e247e09522421280a83e0ebcb2d9fb Updated packages for Ubuntu 7.04: Source archives: http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif_0.6.13-5ubuntu0.3.diff.gz Size/MD5: 10064 df74457a3f072138b4adf327f0921c5e http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif_0.6.13-5ubuntu0.3.dsc Size/MD5: 750 e3cfd9782d221f1b7ac234afbf9cd173 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif_0.6.13.orig.tar.gz Size/MD5: 727418 e5ad93c170bfb4fed6dc3e1c7a7948cb amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.13-5ubuntu0.3_amd64.deb Size/MD5: 1005978 12f9016542fa2dab6244833228219334 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.13-5ubuntu0.3_amd64.deb Size/MD5: 70346 32f78b0313d4ca69cf2e19090b07efeb i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.13-5ubuntu0.3_i386.deb Size/MD5: 996666 b77bd6abf021efc041b2e4c0b5b40ea2 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.13-5ubuntu0.3_i386.deb Size/MD5: 67310 61ba31cc3c63ce7f79ece1277528c1bf powerpc architecture (Apple Macintosh G3/G4/G5): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.13-5ubuntu0.3_powerpc.deb Size/MD5: 1006356 bc29b4428ed98f17ffe1bd6d6ca6609a http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.13-5ubuntu0.3_powerpc.deb Size/MD5: 67786 a7a951b56a444c40b092a3c117e822a0 sparc architecture (Sun SPARC/UltraSPARC): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.13-5ubuntu0.3_sparc.deb Size/MD5: 1003438 01d7a1b6a742f36d75548f74f630c8bc http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.13-5ubuntu0.3_sparc.deb Size/MD5: 65594 3a855f078fc9d092c567aebe7012802d Updated packages for Ubuntu 7.10: Source archives: http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif_0.6.16-1ubuntu0.1.diff.gz Size/MD5: 17340 5a63929bc9580125b3520c6df9f7cac7 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif_0.6.16-1ubuntu0.1.dsc Size/MD5: 759 b31453402e0dbc58f2efff88922f8133 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif_0.6.16.orig.tar.gz Size/MD5: 1006359 13ceaf57b428f27cac86195a7df1f7f6 amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.16-1ubuntu0.1_amd64.deb Size/MD5: 170838 c19d8415b29e07b757efdca5d5435bd6 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.16-1ubuntu0.1_amd64.deb Size/MD5: 80764 faf340037e6b98de5b9c41d145cc6c02 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.16-1ubuntu0.1_i386.deb Size/MD5: 164078 9efe80d75a6d8d7970d607e5a975f5ed http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.16-1ubuntu0.1_i386.deb Size/MD5: 75536 978e7f3d01dbcde5f8ee2fbf07ac9afc lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/libe/libexif/libexif-dev_0.6.16-1ubuntu0.1_lpia.deb Size/MD5: 163364 787a375da7e72dc10d7f8464b442af48 http://ports.ubuntu.com/pool/main/libe/libexif/libexif12_0.6.16-1ubuntu0.1_lpia.deb Size/MD5: 74526 e608b8191bf4dafc7e6962d79d9556e4 powerpc architecture (Apple Macintosh G3/G4/G5): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.16-1ubuntu0.1_powerpc.deb Size/MD5: 169872 5e7585184d409918670150486d8a1a57 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.16-1ubuntu0.1_powerpc.deb Size/MD5: 77072 7c960380692cfbbc709d0df73b8e0691 sparc architecture (Sun SPARC/UltraSPARC): http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif-dev_0.6.16-1ubuntu0.1_sparc.deb Size/MD5: 166628 24dbcba556a13d44b5b2e7178ff629b0 http://security.ubuntu.com/ubuntu/pool/main/libe/libexif/libexif12_0.6.16-1ubuntu0.1_sparc.deb Size/MD5: 75038 0395cc735da2f03c02d147e0124f4828 --qftxBdZWiueWNAVY Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Kees Cook <kees@outflux.net.> iEYEARECAAYFAkj1Oi8ACgkQH/9LqRcGPm3xFACgnehavbJFrE+Xiekkf+gMtPBi 8VkAn0syPrPkMVvGYdQrqdwyoC6fKWwv =0wMl -----END PGP SIGNATURE----- --qftxBdZWiueWNAVY--

<< Previous INDEX Search src / Print Next >>



Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру