<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="d20ff93c1786150d97ea52615112a932"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="libexif-4886"
    timestamp="1199891911"
    engine="1.0">
  <yum:name>libexif</yum:name>
  <summary lang="en">libexif: Fixed 2 security problems in the EXIF loader.</summary>
  <summary lang="de">libexif: Behebt 2 Sicherheitsprobleme im EXIF Loader.</summary>
  <description lang="en">Two bugs in libexif were identified by a Google Security
Audit done by Meder Kydyraliev.

CVE-2007-6351: Loading EXIF data could be used to cause a
infinite recursion and crash CVE-2007-6352: Integer
overflows in the thumbnail handler could be used to
overflow buffers and potentially execute code or crash a
program using libexif.
</description>
  <description lang="de">Zwei Fehler in libexif wurden durch einen Google Security
Audit von Meder Kydyraliev gefunden.

CVE-2007-6351: Das Laden eines EXIF Eintrag konnte zu einer
endlosen Rekursion führen und so das Programm zum Absturz
bringen. CVE-2007-6352: Ein Integer Überlauf im Thumbnail
Lader konnte potentiell genutzt werden um einen Puffer zum
Überlauf zu bringen und damit Code auszuführen oder das
Programm zum Absturz zu bringen.
</description>
  <yum:version ver="4886" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="libexif" epoch="0" ver="0.6.16" rel="23.2" flags="EQ"/>
    <rpm:entry kind="atom" name="libexif-32bit" epoch="0" ver="0.6.16" rel="23.2" flags="EQ"/>
    <rpm:entry kind="atom" name="libexif-64bit" epoch="0" ver="0.6.16" rel="23.2" flags="EQ"/>
    <rpm:entry kind="atom" name="libexif-devel" epoch="0" ver="0.6.16" rel="23.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.6.16" rel="23.2"/>
      <checksum type="sha" pkgid="YES">a654c3c09938208167c906272c6c19e5822149ab</checksum>
      <time file="1199899771" build="1199891911"/>
      <size package="174301" installed="637652" archive="639360"/>
      <location href="rpm/i586/libexif-0.6.16-23.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif" epoch="0" ver="0.6.16" rel="23.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/i586/libexif-0.6.16-23_23.2.i586.delta.rpm"/>
          <checksum type="sha">4d13e4a7178415326a293a40503261a945d3efc9</checksum>
          <time file="1199919710" build="1199891911"/>
          <size package="11933" archive="0"/>
          <base-version epoch="0" ver="0.6.16" rel="23" md5sum="0ae89b3629a8a42292f7235ef4eb101c" buildtime="1190417986" sequence_info="libexif-0.6.16-23-a70f72a6e3a7b5113a8658ac50dcece5a1"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.6.16" rel="23.2"/>
      <checksum type="sha" pkgid="YES">afdd59e48ff7a7db295e77a7f4b895cc358adcd0</checksum>
      <time file="1199899697" build="1199891750"/>
      <size package="174812" installed="649808" archive="651516"/>
      <location href="rpm/ppc/libexif-0.6.16-23.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif" epoch="0" ver="0.6.16" rel="23.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/ppc/libexif-0.6.16-23_23.2.ppc.delta.rpm"/>
          <checksum type="sha">0f5b6f5b0009a910a8e5b32d936bfc03f15c35e1</checksum>
          <time file="1199919718" build="1199891750"/>
          <size package="10747" archive="0"/>
          <base-version epoch="0" ver="0.6.16" rel="23" md5sum="b7b59acc64cdc2b4f766680e7249a411" buildtime="1190451000" sequence_info="libexif-0.6.16-23-aaf44f52332b2314c3daede32a9f8c0da1"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.6.16" rel="23.2"/>
      <checksum type="sha" pkgid="YES">97a64efa61c67ce1409072d07b43559db652de36</checksum>
      <time file="1199899743" build="1199891787"/>
      <size package="180335" installed="677020" archive="678728"/>
      <location href="rpm/x86_64/libexif-0.6.16-23.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif" epoch="0" ver="0.6.16" rel="23.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/libexif-0.6.16-23_23.2.x86_64.delta.rpm"/>
          <checksum type="sha">17f96742efae5d156bd0ae56d1882e5c13e160e1</checksum>
          <time file="1199919721" build="1199891787"/>
          <size package="12350" archive="0"/>
          <base-version epoch="0" ver="0.6.16" rel="23" md5sum="24f480460f436553ca5d5ec3346cf89c" buildtime="1190404034" sequence_info="libexif-0.6.16-23-680e375a7d1774b34e5cb6925954f630a1"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif-32bit</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.6.16" rel="23.2"/>
      <checksum type="sha" pkgid="YES">82782b0927d0d65f9080933b30573f65d122ab13</checksum>
      <time file="1199899771" build="1199891935"/>
      <size package="66441" installed="174800" archive="175220"/>
      <location href="rpm/x86_64/libexif-32bit-0.6.16-23.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif-32bit" epoch="0" ver="0.6.16" rel="23.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif-32bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/libexif-32bit-0.6.16-23_23.2.x86_64.delta.rpm"/>
          <checksum type="sha">188084ae4abf50edc8d84d44ee509f11d1f89426</checksum>
          <time file="1199919724" build="1199891935"/>
          <size package="10644" archive="0"/>
          <base-version epoch="0" ver="0.6.16" rel="23" md5sum="ba63034d10450a934bf332eada1c17e0" buildtime="1190418014" sequence_info="libexif-32bit-0.6.16-23-50588629bddfc9d6c918497939cbc36f20"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif-64bit</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.6.16" rel="23.2"/>
      <checksum type="sha" pkgid="YES">d7da1db3ea032986b06224d68417d7cfd784bc33</checksum>
      <time file="1199919064" build="1199918794"/>
      <size package="71742" installed="253248" archive="253668"/>
      <location href="rpm/ppc/libexif-64bit-0.6.16-23.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif-64bit" epoch="0" ver="0.6.16" rel="23.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif-64bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/ppc/libexif-64bit-0.6.16-23_23.2.ppc.delta.rpm"/>
          <checksum type="sha">d93d7316918e1afaefef66d12b8983c47a80a04f</checksum>
          <time file="1199919726" build="1199918794"/>
          <size package="8644" archive="0"/>
          <base-version epoch="0" ver="0.6.16" rel="23" md5sum="08a6164eb7fbfd4fd7dca6933b8c8892" buildtime="1190412702" sequence_info="libexif-64bit-0.6.16-23-ff3104a2c3d2461a44ed5edf86e89c6320"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif-devel</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.6.16" rel="23.2"/>
      <checksum type="sha" pkgid="YES">310b0fd92dc42725b2a8e337feee6339625c2e2b</checksum>
      <time file="1199899771" build="1199891911"/>
      <size package="73928" installed="411666" archive="425040"/>
      <location href="rpm/i586/libexif-devel-0.6.16-23.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif-devel" epoch="0" ver="0.6.16" rel="23.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/i586/libexif-devel-0.6.16-23_23.2.i586.delta.rpm"/>
          <checksum type="sha">41c655dbb5b42adf7b18c9bf9ab50dbc1af042ff</checksum>
          <time file="1199919727" build="1199891911"/>
          <size package="15163" archive="0"/>
          <base-version epoch="0" ver="0.6.16" rel="23" md5sum="9f6192871920920e37a55693e6f8632a" buildtime="1190417986" sequence_info="libexif-devel-0.6.16-23-28ce08f5f8b00b9072b8d20689e8c9a08a10"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif-devel</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.6.16" rel="23.2"/>
      <checksum type="sha" pkgid="YES">7a4bd544ae72656319929f4ec53d99c14e6928f8</checksum>
      <time file="1199899697" build="1199891750"/>
      <size package="73751" installed="411666" archive="425040"/>
      <location href="rpm/ppc/libexif-devel-0.6.16-23.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif-devel" epoch="0" ver="0.6.16" rel="23.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/ppc/libexif-devel-0.6.16-23_23.2.ppc.delta.rpm"/>
          <checksum type="sha">a7cf39474533b3392b0766fc97771753002eecc2</checksum>
          <time file="1199919731" build="1199891750"/>
          <size package="15103" archive="0"/>
          <base-version epoch="0" ver="0.6.16" rel="23" md5sum="98c28f0a2a819d612de2f1ec7bcea237" buildtime="1190451000" sequence_info="libexif-devel-0.6.16-23-ab3bed9e227f8ff1a3fac4f701931b7b8a10"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.6.16" rel="23.2"/>
      <checksum type="sha" pkgid="YES">d54bd4cb17e09f87840d3eb538a2aec40c78ee03</checksum>
      <time file="1199899744" build="1199891787"/>
      <size package="73801" installed="411670" archive="425048"/>
      <location href="rpm/x86_64/libexif-devel-0.6.16-23.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif-devel" epoch="0" ver="0.6.16" rel="23.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/libexif-devel-0.6.16-23_23.2.x86_64.delta.rpm"/>
          <checksum type="sha">df709d7b9375e4dc93dd9305ede43dbe3cea39f7</checksum>
          <time file="1199919732" build="1199891787"/>
          <size package="15252" archive="0"/>
          <base-version epoch="0" ver="0.6.16" rel="23" md5sum="040047cddde647356a41da6f8fb71cb8" buildtime="1190404034" sequence_info="libexif-devel-0.6.16-23-da3da445f437c69d69065266bd2a511d8a10"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
