Ubuntu update for libexif

Secunia ID	SA50029
CVE-ID	CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841
Release Date	24 Jul 2012
Criticality	Moderately Critical
Solution Status	Vendor Patch
Where	From remote
Impact	DoS (Denial of Service) This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system. System access This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user. Exposure of sensitive information Vulnerabilities where documents or credentials are leaked or can be revealed either locally or from remote.
Description	Ubuntu has issued an update for libexif. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose certain sensitive information, cause a DoS (Denial of Service), and compromise an application using the library. For more information: SA49857
Solution	Apply updated packages. -- Ubuntu 12.04 LTS -- https://launchpad.net/ubuntu/+source/libexif/0.6.20-2ubuntu0.1 -- Ubuntu 11.10 -- https://launchpad.net/ubuntu/+source/libexif/0.6.20-1ubuntu0.1 -- Ubuntu 11.04 -- https://launchpad.net/ubuntu/+source/libexif/0.6.20-0ubuntu1.1 -- Ubuntu 10.04 LTS -- https://launchpad.net/ubuntu/+source/libexif/0.6.19-1ubuntu0.1 -- Ubuntu 8.04 LTS -- https://launchpad.net/ubuntu/+source/libexif/0.6.16-2.1ubuntu0.2
Original Advisory	USN-1513-1: http://www.ubuntu.com/usn/usn-1513-1

© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.