Ubuntu
jhead package

jhead 1:3.04-1ubuntu0.1 source package in Ubuntu

Changelog

jhead (1:3.04-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: heap buffer overflow when processing the DQT markers
    - debian/patches/CVE-2020-6624.patch: Adds further DQT verifications in
      jpgqguess.c.
    - CVE-2020-6624
  * SECURITY UPDATE: heap out-of-bounds read when processing longitude tags
    - debian/patches/CVE-2020-6625.patch: Adds further verifications in
      gpsinfo.c.
    - CVE-2020-6625
  * SECURITY UPDATE: heap buffer overflow when reading JPEG sections
    - debian/patches/CVE-2020-26208.patch: Allocates additional 20 bytes in
      jpgfile.c.
    - CVE-2020-26208
  * SECURITY UPDATE: heap out-of-bounds read when processing Canon images
    - debian/patches/CVE-2021-28276_28278.patch: Adds further verifications in
      makernote.c.
    - CVE-2021-28276
  * SECURITY UPDATE: heap buffer overflow when removing a certain type of
    section
    - debian/patches/CVE-2021-28276_28278.patch: Adds further verifications
      while processing nested EXIF directories in exif.c.
    - CVE-2021-28278

 -- George-Andrei Iosif <email address hidden>  Wed, 17 May 2023 15:50:56 +0300

Upload details

Uploaded by:
George-Andrei Iosif
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
graphics
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
jhead_3.04.orig.tar.gz 66.2 KiB ef89bbcf4f6c25ed88088cf242a47a6aedfff4f08cc7dc205bf3e2c0f10a03c9
jhead_3.04-1ubuntu0.1.debian.tar.xz 8.6 KiB 5221406d2abb263494d6483bccaac141ef80a6a2e192e1c30d131a0cb4723c64
jhead_3.04-1ubuntu0.1.dsc 1.9 KiB 9209591366c7baa5a9c8be47eb258c2f65c39c97d9df2ee9bc63a5dbe115f6f2

View changes file

Binary packages built by this source

jhead: manipulate the non-image part of Exif compliant JPEG files

 jhead is a command line driven utility for extracting digital camera settings
 from the Exif format files used by many digital cameras. It handles the
 various confusing ways these can be expressed, and displays them as F-stop,
 shutter speed, etc. It is also able to reduce the size of digital camera JPEGs
 without loss of information, by deleting integral thumbnails that digital
 cameras put into the Exif header.

jhead-dbgsym: debug symbols for jhead