Format: 1.8 Date: Wed, 24 May 2023 14:17:45 +0300 Source: jhead Binary: jhead Built-For-Profiles: noudeb Architecture: riscv64 Version: 1:3.06.0.1-2ubuntu0.22.10.1 Distribution: kinetic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: George-Andrei Iosif Description: jhead - manipulate the non-image part of Exif compliant JPEG files Changes: jhead (1:3.06.0.1-2ubuntu0.22.10.1) kinetic-security; urgency=medium . * SECURITY UPDATE: heap buffer overflow while rotating an image - debian/patches/CVE-2021-34055.patch: If a read EXIF section in jpgfile.c, then discard it. - CVE-2021-34055 * SECURITY UPDATE: code execution when regenerating the Exif thumbnail - debian/patches/CVE-2022-41751.patch: Adds a check in jhead.c for dangerous characters in filenames. - CVE-2022-41751 Checksums-Sha1: bbe339d10e5425c01cafcf4314a5f1e0c9150eea 68306 jhead-dbgsym_3.06.0.1-2ubuntu0.22.10.1_riscv64.ddeb 9b201b5e41dd30193a8bd1e5f93e31ffadad5bb2 6187 jhead_3.06.0.1-2ubuntu0.22.10.1_riscv64.buildinfo 1a325a6e334e25f88e462ac23683319a48c13b63 51672 jhead_3.06.0.1-2ubuntu0.22.10.1_riscv64.deb Checksums-Sha256: a086e422eb3758f6f9c1708c8ba2d68703bccc499a283e854f5205826ddafb33 68306 jhead-dbgsym_3.06.0.1-2ubuntu0.22.10.1_riscv64.ddeb 08f85c45740ba3afcf2096ceddf3dacda28afce2afa897e6ae71bab89418381f 6187 jhead_3.06.0.1-2ubuntu0.22.10.1_riscv64.buildinfo d000b20d4756b15daf40cd8a9bcae1e64d4f3fa2fd41f6b78f57a7572e56ba0f 51672 jhead_3.06.0.1-2ubuntu0.22.10.1_riscv64.deb Files: 49f1868a7784ae777b92d62c0c0af3b0 68306 debug optional jhead-dbgsym_3.06.0.1-2ubuntu0.22.10.1_riscv64.ddeb a834a87aa5c4a22db5ecef8cabc486ea 6187 graphics optional jhead_3.06.0.1-2ubuntu0.22.10.1_riscv64.buildinfo 3a7e51383bdd9054500796122368da01 51672 graphics optional jhead_3.06.0.1-2ubuntu0.22.10.1_riscv64.deb Original-Maintainer: Joachim Reichel