<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="d20ff93c1786150d97ea52615112a932"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="libexif-4886"
    timestamp="1199892151"
    engine="1.0">
  <yum:name>libexif</yum:name>
  <summary lang="en">libexif: Fixed 2 security problems in the EXIF loader.</summary>
  <summary lang="de">libexif: Behebt 2 Sicherheitsprobleme im EXIF Loader.</summary>
  <description lang="en">Two bugs in libexif were identified by a Google Security
Audit done by Meder Kydyraliev.

CVE-2007-6351: Loading EXIF data could be used to cause a
infinite recursion and crash CVE-2007-6352: Integer
overflows in the thumbnail handler could be used to
overflow buffers and potentially execute code or crash a
program using libexif.
</description>
  <description lang="de">Zwei Fehler in libexif wurden durch einen Google Security
Audit von Meder Kydyraliev gefunden.

CVE-2007-6351: Das Laden eines EXIF Eintrag konnte zu einer
endlosen Rekursion führen und so das Programm zum Absturz
bringen. CVE-2007-6352: Ein Integer Überlauf im Thumbnail
Lader konnte potentiell genutzt werden um einen Puffer zum
Überlauf zu bringen und damit Code auszuführen oder das
Programm zum Absturz zu bringen.
</description>
  <yum:version ver="4886" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="libexif" epoch="0" ver="0.6.13" rel="20.9" flags="EQ"/>
    <rpm:entry kind="atom" name="libexif-32bit" epoch="0" ver="0.6.13" rel="20.9" flags="EQ"/>
    <rpm:entry kind="atom" name="libexif-64bit" epoch="0" ver="0.6.13" rel="20.9" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.6.13" rel="20.9"/>
      <checksum type="sha" pkgid="YES">d0c28fdcde237648536a081da7a14b11f7d9642c</checksum>
      <time file="1199899678" build="1199892151"/>
      <size package="427853" installed="4114302" archive="4159108"/>
      <location href="rpm/i586/libexif-0.6.13-20.9.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif" epoch="0" ver="0.6.13" rel="20.9" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/libexif-0.6.13-20.9.i586.patch.rpm"/>
          <checksum type="sha">4d389e77596841e68215557854fb1374aa40d548</checksum>
          <time file="1199919607" build="1199892151"/>
          <size package="314929" archive="3710796"/>
          <base-version epoch="0" ver="0.6.13" rel="18"/>
          <base-version epoch="0" ver="0.6.13" rel="20.6"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/i586/libexif-0.6.13-18_20.9.i586.delta.rpm"/>
          <checksum type="sha">38c2dce463070664a112cbd91b58bea0f6f5c8b0</checksum>
          <time file="1199919611" build="1199892151"/>
          <size package="45740" archive="0"/>
          <base-version epoch="0" ver="0.6.13" rel="18" md5sum="f4b60df6fc5d05e9775c56e6f6e7539e" buildtime="1145758770" sequence_info="libexif-0.6.13-18-86ab5a494d8f00969222a79e01d5faeebf30"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/i586/libexif-0.6.13-20.6_20.9.i586.delta.rpm"/>
          <checksum type="sha">84691271bee8ed4de56a42322ebf4bd6f2f3cc4e</checksum>
          <time file="1199919612" build="1199892151"/>
          <size package="42138" archive="0"/>
          <base-version epoch="0" ver="0.6.13" rel="20.6" md5sum="19c460b7303a61f73aa6e8fc608c19e6" buildtime="1182429092" sequence_info="libexif-0.6.13-20.6-47e39d6887b1c41b9d036cdc8062c6d4e21cc3"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.6.13" rel="20.9"/>
      <checksum type="sha" pkgid="YES">d635b2162462e6464ab7a76064e98cde98d2fb47</checksum>
      <time file="1199899458" build="1199892373"/>
      <size package="428748" installed="4124802" archive="4169608"/>
      <location href="rpm/ppc/libexif-0.6.13-20.9.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif" epoch="0" ver="0.6.13" rel="20.9" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/libexif-0.6.13-20.9.ppc.patch.rpm"/>
          <checksum type="sha">f2dab879078676a9586fd3c58e1d7414ba36434b</checksum>
          <time file="1199919627" build="1199892373"/>
          <size package="316665" archive="3721296"/>
          <base-version epoch="0" ver="0.6.13" rel="18"/>
          <base-version epoch="0" ver="0.6.13" rel="20.6"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/libexif-0.6.13-18_20.9.ppc.delta.rpm"/>
          <checksum type="sha">fe18f86553845070ed68f1cdc1ee96be94780917</checksum>
          <time file="1199919629" build="1199892373"/>
          <size package="61411" archive="0"/>
          <base-version epoch="0" ver="0.6.13" rel="18" md5sum="4fdc784ecc3f43549cb3cd3ed507744b" buildtime="1145776967" sequence_info="libexif-0.6.13-18-0c7c17029caac0945befab95ee70bb6ebf30"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/ppc/libexif-0.6.13-20.6_20.9.ppc.delta.rpm"/>
          <checksum type="sha">80d1e84912f6e018b1e4321ff720037cb2fa5fcb</checksum>
          <time file="1199919631" build="1199892373"/>
          <size package="57652" archive="0"/>
          <base-version epoch="0" ver="0.6.13" rel="20.6" md5sum="6dfe90de0ec18f6b62545d41c1ce0451" buildtime="1182429708" sequence_info="libexif-0.6.13-20.6-eaba6b2105f9599a4ad2f2959d4428d7e21cc3"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.6.13" rel="20.9"/>
      <checksum type="sha" pkgid="YES">609eef23cba39a75f39b439e67d097c01e317b95</checksum>
      <time file="1199899324" build="1199892234"/>
      <size package="431490" installed="4137422" archive="4182236"/>
      <location href="rpm/x86_64/libexif-0.6.13-20.9.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif" epoch="0" ver="0.6.13" rel="20.9" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/libexif-0.6.13-20.9.x86_64.patch.rpm"/>
          <checksum type="sha">19069f525fc05a570c13ddad66384f955d035301</checksum>
          <time file="1199919638" build="1199892234"/>
          <size package="320966" archive="3733912"/>
          <base-version epoch="0" ver="0.6.13" rel="18"/>
          <base-version epoch="0" ver="0.6.13" rel="20.6"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/libexif-0.6.13-18_20.9.x86_64.delta.rpm"/>
          <checksum type="sha">0fabf97e7e76df37da44abb746149457d044fd59</checksum>
          <time file="1199919640" build="1199892234"/>
          <size package="50883" archive="0"/>
          <base-version epoch="0" ver="0.6.13" rel="18" md5sum="7b83595ab1d0932bcc480d7eb998fa0f" buildtime="1145755363" sequence_info="libexif-0.6.13-18-8832b15cf725ab0c6b9f0cecc805fd28bf30"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/x86_64/libexif-0.6.13-20.6_20.9.x86_64.delta.rpm"/>
          <checksum type="sha">16c4023e8ff0aa43fd2bf82bdb37980212a4f473</checksum>
          <time file="1199919642" build="1199892234"/>
          <size package="47670" archive="0"/>
          <base-version epoch="0" ver="0.6.13" rel="20.6" md5sum="9b758ea30cd441c9d43d0320b4660878" buildtime="1182428904" sequence_info="libexif-0.6.13-20.6-4d50a03b5dc950eb926fbe687e04c763e21cc3"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif-32bit</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.6.13" rel="20.9"/>
      <checksum type="sha" pkgid="YES">698ab199dafe66dea6d46171f7e9eb03be49375b</checksum>
      <time file="1199899679" build="1199892161"/>
      <size package="57347" installed="146229" archive="146936"/>
      <location href="rpm/x86_64/libexif-32bit-0.6.13-20.9.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif-32bit" epoch="0" ver="0.6.13" rel="20.9" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif-32bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/libexif-32bit-0.6.13-20.9.x86_64.patch.rpm"/>
          <checksum type="sha">dce3b84f1da4a9470d06b0d03b3049b83bfef6bf</checksum>
          <time file="1199919645" build="1199892161"/>
          <size package="57047" archive="145708"/>
          <base-version epoch="0" ver="0.6.13" rel="18"/>
          <base-version epoch="0" ver="0.6.13" rel="20.6"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/libexif-32bit-0.6.13-18_20.9.x86_64.delta.rpm"/>
          <checksum type="sha">e0e60e4a6d7e6b25abd70177d6911d5393336b4c</checksum>
          <time file="1199919646" build="1199892161"/>
          <size package="13532" archive="0"/>
          <base-version epoch="0" ver="0.6.13" rel="18" md5sum="2673e39e0dba7abf53fb68a122711aa0" buildtime="1145758795" sequence_info="libexif-32bit-0.6.13-18-8fdc56b6ed7d6a3984644b07d415344e40"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/x86_64/libexif-32bit-0.6.13-20.6_20.9.x86_64.delta.rpm"/>
          <checksum type="sha">73262d45f8191a64c0cdfee1e8333ef22fc11a97</checksum>
          <time file="1199919646" build="1199892161"/>
          <size package="12754" archive="0"/>
          <base-version epoch="0" ver="0.6.13" rel="20.6" md5sum="7b7666c817078d8ce07026a823dd9b4d" buildtime="1182429104" sequence_info="libexif-32bit-0.6.13-20.6-a285bf05cec3576d09a5b9a68c19247a40"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif-64bit</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.6.13" rel="20.9"/>
      <checksum type="sha" pkgid="YES">e333b5410d70259a97e87aa337bcc767ff084e9f</checksum>
      <time file="1199899533" build="1199894997"/>
      <size package="61970" installed="206835" archive="207548"/>
      <location href="rpm/ppc/libexif-64bit-0.6.13-20.9.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif-64bit" epoch="0" ver="0.6.13" rel="20.9" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif-64bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/libexif-64bit-0.6.13-20.9.ppc.patch.rpm"/>
          <checksum type="sha">7ae30d0121dc68e5c301213fcd7b0bc57e5a521d</checksum>
          <time file="1199919650" build="1199894997"/>
          <size package="61554" archive="206312"/>
          <base-version epoch="0" ver="0.6.13" rel="18"/>
          <base-version epoch="0" ver="0.6.13" rel="20.6"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/libexif-64bit-0.6.13-18_20.9.ppc.delta.rpm"/>
          <checksum type="sha">9f15d2512fd4d8ccc2c9088027f2737684dae952</checksum>
          <time file="1199919650" build="1199894997"/>
          <size package="30903" archive="0"/>
          <base-version epoch="0" ver="0.6.13" rel="18" md5sum="b1acc00f2f1087153cd8bc24b568cacf" buildtime="1145773763" sequence_info="libexif-64bit-0.6.13-18-c156de89008ab110dbd7d2d499de9c0d40"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
