Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [PLSN-0006] new libexif package available |
|---|---|
| Date: | Mon, 25 Apr 2005 22:13:38 -0400 |
---------------------------------------------------------------------------
Peachtree Linux Security Notice PLSN-0006
April 22, 2005
Remote DoS vulnerability in libexif
CAN-2005-0664
---------------------------------------------------------------------------
The following Peachtree Linux releases are affected:
Peachtree Linux release 1 ("Atlanta")
Description:
CAN-2005-0664: Buffer overflow in the EXIF library (libexif) does not
properly validate the structure of the EXIF tags, which allows remote
attackers to cause a denial of service (application crash) and possibly
execute arbitrary code via an image with a crafted EXIF tag.
Packages:
alpha
8cdf8dde707c24d1817eb99f5c81b783 libexif-0.6.11.alpha.dist
i386
767c6442a6e76ba424b2295c422bea3c libexif-0.6.11.i686.dist
ppc
e5e7a516f9fc5be261c00beae0577517 libexif-0.6.11.ppc.dist
Solution:
Download the appropriate package for your release of Peachtree linux.
Upgrade your system to the new package:
distadd -u packagename
Where package name is the name of the package file from the list above.
--
Peachtree Linux Security Team
http://peachtree.burdell.org/
pgpLewVK6daZE.pgp
Description: PGP signature
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [PLSN-0007] new libcdaudio package available, Peachtree Linux Security Team |
|---|---|
| Next by Date: | [PLSN-0005] new cvs package available, Peachtree Linux Security Team |
| Previous by Thread: | [PLSN-0007] new libcdaudio package available, Peachtree Linux Security Team |
| Next by Thread: | [PLSN-0005] new cvs package available, Peachtree Linux Security Team |
| Indexes: | [Date] [Thread] [Top] [All Lists] |