Format: 1.8 Date: Wed, 24 May 2023 14:17:45 +0300 Source: jhead Binary: jhead Built-For-Profiles: noudeb Architecture: armhf Version: 1:3.06.0.1-2ubuntu0.22.10.1 Distribution: kinetic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: George-Andrei Iosif Description: jhead - manipulate the non-image part of Exif compliant JPEG files Changes: jhead (1:3.06.0.1-2ubuntu0.22.10.1) kinetic-security; urgency=medium . * SECURITY UPDATE: heap buffer overflow while rotating an image - debian/patches/CVE-2021-34055.patch: If a read EXIF section in jpgfile.c, then discard it. - CVE-2021-34055 * SECURITY UPDATE: code execution when regenerating the Exif thumbnail - debian/patches/CVE-2022-41751.patch: Adds a check in jhead.c for dangerous characters in filenames. - CVE-2022-41751 Checksums-Sha1: be6cfd25903a389d2ecf8e16fa0eafb0fe1749b4 67076 jhead-dbgsym_3.06.0.1-2ubuntu0.22.10.1_armhf.ddeb 8da7ea7cee2722c74f02fdf36babec760043eda0 6197 jhead_3.06.0.1-2ubuntu0.22.10.1_armhf.buildinfo 1b7076c261a841fd608b7a7665f917c123038ff3 49654 jhead_3.06.0.1-2ubuntu0.22.10.1_armhf.deb Checksums-Sha256: f0507804a0fbe57f4d42999c4239269f2f45f51256a70edb28886f7a6ba414fc 67076 jhead-dbgsym_3.06.0.1-2ubuntu0.22.10.1_armhf.ddeb 844801af0504ec8542f60a0a7c000d7277707ae3c1c115fd02247612e424be2f 6197 jhead_3.06.0.1-2ubuntu0.22.10.1_armhf.buildinfo 25eecd331edbc119a82247388ccfb8efd05134ebc4ad1c169b283603501d0117 49654 jhead_3.06.0.1-2ubuntu0.22.10.1_armhf.deb Files: 3f5167a6d5abe86117a01cbb17e34062 67076 debug optional jhead-dbgsym_3.06.0.1-2ubuntu0.22.10.1_armhf.ddeb 46d0dd46e16f5d1e174f14aaa84e1e7f 6197 graphics optional jhead_3.06.0.1-2ubuntu0.22.10.1_armhf.buildinfo 909e8ca9b643c19f17881f7ef1e2adcb 49654 graphics optional jhead_3.06.0.1-2ubuntu0.22.10.1_armhf.deb Original-Maintainer: Joachim Reichel