<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="d20ff93c1786150d97ea52615112a932"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="libexif-4886"
    timestamp="1199891493"
    engine="1.0">
  <yum:name>libexif</yum:name>
  <summary lang="en">libexif: Fixed 2 security problems in the EXIF loader.</summary>
  <summary lang="de">libexif: Behebt 2 Sicherheitsprobleme im EXIF Loader.</summary>
  <description lang="en">Two bugs in libexif were identified by a Google Security
Audit done by Meder Kydyraliev.

CVE-2007-6351: Loading EXIF data could be used to cause a
infinite recursion and crash CVE-2007-6352: Integer
overflows in the thumbnail handler could be used to
overflow buffers and potentially execute code or crash a
program using libexif.
</description>
  <description lang="de">Zwei Fehler in libexif wurden durch einen Google Security
Audit von Meder Kydyraliev gefunden.

CVE-2007-6351: Das Laden eines EXIF Eintrag konnte zu einer
endlosen Rekursion führen und so das Programm zum Absturz
bringen. CVE-2007-6352: Ein Integer Überlauf im Thumbnail
Lader konnte potentiell genutzt werden um einen Puffer zum
Überlauf zu bringen und damit Code auszuführen oder das
Programm zum Absturz zu bringen.
</description>
  <yum:version ver="4886" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="libexif" epoch="0" ver="0.6.14" rel="22" flags="EQ"/>
    <rpm:entry kind="atom" name="libexif-32bit" epoch="0" ver="0.6.14" rel="22" flags="EQ"/>
    <rpm:entry kind="atom" name="libexif-64bit" epoch="0" ver="0.6.14" rel="22" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.6.14" rel="22"/>
      <checksum type="sha" pkgid="YES">05f99521ab51e3d7960eb61cb0e3b4388f183104</checksum>
      <time file="1199899352" build="1199891493"/>
      <size package="471237" installed="4199753" archive="4246176"/>
      <location href="rpm/i586/libexif-0.6.14-22.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif" epoch="0" ver="0.6.14" rel="22" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/libexif-0.6.14-22.i586.patch.rpm"/>
          <checksum type="sha">26c0e2ac0be019ba8e21727a62ba32dcc107a8fb</checksum>
          <time file="1199919656" build="1199891493"/>
          <size package="318293" archive="3650644"/>
          <base-version epoch="0" ver="0.6.14" rel="18"/>
          <base-version epoch="0" ver="0.6.14" rel="20"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/i586/libexif-0.6.14-18_22.i586.delta.rpm"/>
          <checksum type="sha">6a7d28ff01d8a9106dd320a22cf6688dca4898d6</checksum>
          <time file="1199919659" build="1199891493"/>
          <size package="44306" archive="0"/>
          <base-version epoch="0" ver="0.6.14" rel="18" md5sum="c70b3c9365deb24a135bbbd7f6d40fbb" buildtime="1164459507" sequence_info="libexif-0.6.14-18-b59f2f44b3fa1fa5b0b80ec385f2221cc840"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/i586/libexif-0.6.14-20_22.i586.delta.rpm"/>
          <checksum type="sha">8b1b773e75a512ccc3b2b6ff6fbad5d823b8de25</checksum>
          <time file="1199919661" build="1199891493"/>
          <size package="40879" archive="0"/>
          <base-version epoch="0" ver="0.6.14" rel="20" md5sum="8b51ea8c00917b92f2c6f917dc6c7075" buildtime="1181941077" sequence_info="libexif-0.6.14-20-25d97aea0e6212498d4be91bfd7b7079e21dd3"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.6.14" rel="22"/>
      <checksum type="sha" pkgid="YES">37629fcff31a221038938dd7be730d5111accda8</checksum>
      <time file="1199899432" build="1199892086"/>
      <size package="471843" installed="4211933" archive="4258356"/>
      <location href="rpm/ppc/libexif-0.6.14-22.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif" epoch="0" ver="0.6.14" rel="22" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/libexif-0.6.14-22.ppc.patch.rpm"/>
          <checksum type="sha">356798fca660a6ef33def45f775f3b003fc9a937</checksum>
          <time file="1199919672" build="1199892086"/>
          <size package="318992" archive="3662824"/>
          <base-version epoch="0" ver="0.6.14" rel="18"/>
          <base-version epoch="0" ver="0.6.14" rel="20"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/libexif-0.6.14-18_22.ppc.delta.rpm"/>
          <checksum type="sha">785f8ab068fac360ec054dd3c0a104011a871647</checksum>
          <time file="1199919674" build="1199892086"/>
          <size package="43697" archive="0"/>
          <base-version epoch="0" ver="0.6.14" rel="18" md5sum="812dc44b0fdb23ef316f202508b39810" buildtime="1164490713" sequence_info="libexif-0.6.14-18-0fbb32524b7648fd85419ea7180836cac840"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/ppc/libexif-0.6.14-20_22.ppc.delta.rpm"/>
          <checksum type="sha">d43ee082b0ba2b68e2286641c38fc143d917e715</checksum>
          <time file="1199919675" build="1199892086"/>
          <size package="40370" archive="0"/>
          <base-version epoch="0" ver="0.6.14" rel="20" md5sum="8b4fd53fe4d613e8265cca92e4125eed" buildtime="1181941135" sequence_info="libexif-0.6.14-20-8e090fc15323b30ee64db6c954292b6fe21dd3"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.6.14" rel="22"/>
      <checksum type="sha" pkgid="YES">6f0be6e3b31ccf8568dc3457016a372261f34f31</checksum>
      <time file="1199899545" build="1199891262"/>
      <size package="474450" installed="4226449" archive="4272880"/>
      <location href="rpm/x86_64/libexif-0.6.14-22.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif" epoch="0" ver="0.6.14" rel="22" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/libexif-0.6.14-22.x86_64.patch.rpm"/>
          <checksum type="sha">9382b196e8d02e9cf29635a35e4514ef2fa4334b</checksum>
          <time file="1199919690" build="1199891262"/>
          <size package="322957" archive="3677336"/>
          <base-version epoch="0" ver="0.6.14" rel="18"/>
          <base-version epoch="0" ver="0.6.14" rel="20"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/libexif-0.6.14-18_22.x86_64.delta.rpm"/>
          <checksum type="sha">ca743519bede7d54934408df0d15dcc08834a619</checksum>
          <time file="1199919693" build="1199891262"/>
          <size package="44832" archive="0"/>
          <base-version epoch="0" ver="0.6.14" rel="18" md5sum="d94825b79388bf38e9f5c62f5020b33b" buildtime="1164456954" sequence_info="libexif-0.6.14-18-ff2112239a804e7311c56e96ca93f2b0c840"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/x86_64/libexif-0.6.14-20_22.x86_64.delta.rpm"/>
          <checksum type="sha">84ba7cc8bc5577c463d594e0c876229900911f30</checksum>
          <time file="1199919695" build="1199891262"/>
          <size package="41110" archive="0"/>
          <base-version epoch="0" ver="0.6.14" rel="20" md5sum="281b4a175bc3ee533c2bc013045cb56f" buildtime="1181941131" sequence_info="libexif-0.6.14-20-0d1b3414cf53625219a663c3326293dae21dd3"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif-32bit</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.6.14" rel="22"/>
      <checksum type="sha" pkgid="YES">761aa1521c23888e758c6fc82058a381fc28864a</checksum>
      <time file="1199899352" build="1199891504"/>
      <size package="60804" installed="158677" archive="159384"/>
      <location href="rpm/x86_64/libexif-32bit-0.6.14-22.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif-32bit" epoch="0" ver="0.6.14" rel="22" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif-32bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/libexif-32bit-0.6.14-22.x86_64.patch.rpm"/>
          <checksum type="sha">a89dcb92098e401099fea9aaa92c88a069a57767</checksum>
          <time file="1199919699" build="1199891504"/>
          <size package="60482" archive="158156"/>
          <base-version epoch="0" ver="0.6.14" rel="18"/>
          <base-version epoch="0" ver="0.6.14" rel="20"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/libexif-32bit-0.6.14-18_22.x86_64.delta.rpm"/>
          <checksum type="sha">1397eafc620915822d21929724408148c4fbcf0b</checksum>
          <time file="1199919699" build="1199891504"/>
          <size package="10747" archive="0"/>
          <base-version epoch="0" ver="0.6.14" rel="18" md5sum="fa1312708f32caac60ec02e00f4dab98" buildtime="1164459521" sequence_info="libexif-32bit-0.6.14-18-477e1f68a93534c7d740bfa0fa5d4eef40"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/x86_64/libexif-32bit-0.6.14-20_22.x86_64.delta.rpm"/>
          <checksum type="sha">d424ecbf9cb9f5475982782c1b0beb8f7d65a5d2</checksum>
          <time file="1199919700" build="1199891504"/>
          <size package="10046" archive="0"/>
          <base-version epoch="0" ver="0.6.14" rel="20" md5sum="af8ca717ed67c7daf8162264d8c9aad0" buildtime="1181941090" sequence_info="libexif-32bit-0.6.14-20-3e056ba033921dab52922df8081261ff40"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libexif-64bit</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.6.14" rel="22"/>
      <checksum type="sha" pkgid="YES">874a075226818b0072174b96ac168be84cabb968</checksum>
      <time file="1199899551" build="1199892325"/>
      <size package="65892" installed="220267" archive="220980"/>
      <location href="rpm/ppc/libexif-64bit-0.6.14-22.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libexif-64bit" epoch="0" ver="0.6.14" rel="22" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libexif-64bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/libexif-64bit-0.6.14-22.ppc.patch.rpm"/>
          <checksum type="sha">9d979780d2d9c17705969ac4d79ee2941dd7b44a</checksum>
          <time file="1199919705" build="1199892325"/>
          <size package="65564" archive="219744"/>
          <base-version epoch="0" ver="0.6.14" rel="18"/>
          <base-version epoch="0" ver="0.6.14" rel="20"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/libexif-64bit-0.6.14-18_22.ppc.delta.rpm"/>
          <checksum type="sha">13b5a010ffdddefd4441e03926b046844c28bdfb</checksum>
          <time file="1199919705" build="1199892325"/>
          <size package="15215" archive="0"/>
          <base-version epoch="0" ver="0.6.14" rel="18" md5sum="2d86aa1adc0fd96cc72c411e97a9bae6" buildtime="1164582997" sequence_info="libexif-64bit-0.6.14-18-ddc06da6495fda7fa5851fec330f47e040"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
