[ubuntu/kinetic-updates] jhead 1:3.06.0.1-2ubuntu0.22.10.1 (Accepted)

Ubuntu Archive Robot ubuntu-archive-robot at lists.canonical.com
Thu May 25 07:28:21 UTC 2023


jhead (1:3.06.0.1-2ubuntu0.22.10.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: heap buffer overflow while rotating an image
    - debian/patches/CVE-2021-34055.patch: If a read EXIF section in
      jpgfile.c, then discard it.
    - CVE-2021-34055
  * SECURITY UPDATE: code execution when regenerating the Exif thumbnail
    - debian/patches/CVE-2022-41751.patch: Adds a check in jhead.c for
      dangerous characters in filenames.
    - CVE-2022-41751

Date: 2023-05-24 13:23:09.949867+00:00
Changed-By: George-Andrei Iosif <andrei.iosif at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/jhead/1:3.06.0.1-2ubuntu0.22.10.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the kinetic-changes mailing list