Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Slackware: SSA-2012-200-01 Critical: Libexif Remote Code Execution

slackware
Calendar Grey July 18, 2012
Scroller Slackware
Recent libexif updates for Slackware address severe security vulnerabilities, encompassing threats of remote code execution.
New libexif packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues

Summary

Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libexif-0.6.21-i486-1_slack13.37.txz: Upgraded. This update fixes a number of remotely exploitable issues in libexif with effects ranging from information leakage to potential remote code execution. For more information, see: https://www.cve.org/CVERecord?id=CVE-2012-2812 https://www.cve.org/CVERecord?id=CVE-2012-2813 https://www.cve.org/CVERecord?id=CVE-2012-2814 https://www.cve.org/CVERecord?id=CVE-2012-2836 https://www.cve.org/CVERecord?id=CVE-2012-2837 https://www.cve.org/CVERecord?id=CVE-2012-2840 https://www.cve.org/CVERecord?id=CVE-2012-2841 https://www.cve.org/CVERecord?id=CVE-2012-2845 (* Security fix *)

Topics%20covered

Topics Covered

security advisory security issue critical software update remote execution slackware libexif

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 11.0: ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/libexif-0.6.21-i486-1_slack11.0.tgz
Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/libexif-0.6.21-i486-1_slack12.0.tgz
Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/libexif-0.6.21-i486-1_slack12.1.tgz
Updated package for Slackware 12.2: ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/libexif-0.6.21-i486-1_slack12.2.tgz
Updated package for Slackware 13.0: ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/libexif-0.6.21-i486-1_slack13.0.txz
Updated package for Slackware x86_64 13.0: ...

Read the Full Advisory

MD5 Signatures

Slackware 11.0 package: aadf22f6f027b497b3d19dd3a0ceee66 libexif-0.6.21-i486-1_slack11.0.tgz
Slackware 12.0 package: 1484e727e4dfd5a1306440cc5b2b51a4 libexif-0.6.21-i486-1_slack12.0.tgz
Slackware 12.1 package: 31458a317d0ae2885208aa5b45a5a6b9 libexif-0.6.21-i486-1_slack12.1.tgz
Slackware 12.2 package: 881b18752e5dd65ceccb403e21300674 libexif-0.6.21-i486-1_slack12.2.tgz
Slackware 13.0 package: df22465f3ec98b756d7af16535575d2b libexif-0.6.21-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: ec187f8200df8ec50ae1852eed130ced libexif-0.6.21-x86_64-1_slack13.0.txz
Slackware 13.1 package: 05938cf24652d713c3c801110f57e253 libexif-0.6.21-i486-1_slack13.1.txz
Slackware x86_64 13.1 package: e5b98027505aa2fc55a5e34a4388c082 libexif-0.6.21-x86_64-1_slack13.1.txz
Slackware 13.37 package: 4e00735844dd8901f9007cdd7b8cd1f7 libexif-0.6.21-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: 9cb8c082488175736b36ee1c0446657e libexif-0.6.21-x86_64-1_slack13.37.txz
Slackware -current package: 3985d40529d820488c122643cec3f327 l/libexif-0.6.21-i486-1.txz
Slackware x86_64 -current package: 86772b39a5ba783bb7d69cb9a53d2c07 l/libexif-0.6.21-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security issue critical software update remote execution slackware libexif

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg libexif-0.6.21-i486-1_slack13.37.txz