projects / buildroot.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: cba42d7)
package/jhead: security bump to version 3.04
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Wed, 4 Mar 2020 21:45:32 +0000 (22:45 +0100)
committerPeter Korsgaard <peter@korsgaard.com>
Thu, 5 Mar 2020 15:35:42 +0000 (16:35 +0100)
- Fix CVE-2019-1010301: jhead 3.03 is affected by: Buffer Overflow. The
  impact is: Denial of service. The component is: gpsinfo.c Line 151
  ProcessGpsInfo(). The attack vector is: Open a specially crafted JPEG
  file.
- Fix CVE-2019-1010302: jhead 3.03 is affected by: Incorrect Access
  Control. The impact is: Denial of service. The component is: iptc.c
  Line 122 show_IPTC(). The attack vector is: the victim must open a
  specially crafted JPEG file.
- Fix CVE-2019-19035: jhead 3.03 is affected by: heap-based buffer
  over-read. The impact is: Denial of service. The component is:
  ReadJpegSections and process_SOFn in jpgfile.c. The attack vector is:
  Open a specially crafted JPEG file.
- Update indentation of hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/jhead/jhead.hash patch | blob | history
package/jhead/jhead.mk patch | blob | history

diff --git a/package/jhead/jhead.hash b/package/jhead/jhead.hash
index 9ee5055f7cfc10731dfdaa30ef9d5ef04815f163..ffe75381b3fdd62263138b58fcb5198aaf1ab04d 100644 (file)
--- a/package/jhead/jhead.hash
+++ b/package/jhead/jhead.hash
@@ -1,3 +1,3 @@
 # Locally calculated from download (no sig, hash)
-sha256 82194e0128d9141038f82fadcb5845391ca3021d61bc00815078601619f6c0c2        jhead-3.03.tar.gz
-sha256 46c870a208305489eea862ec8b05b030ba1f06d99195f660dc0ba541cc38d82b        readme.txt
+sha256  ef89bbcf4f6c25ed88088cf242a47a6aedfff4f08cc7dc205bf3e2c0f10a03c9  jhead-3.04.tar.gz
+sha256  46c870a208305489eea862ec8b05b030ba1f06d99195f660dc0ba541cc38d82b  readme.txt
diff --git a/package/jhead/jhead.mk b/package/jhead/jhead.mk
index 65f8cdb73cd536cf7d1530f540a70ed7ba05a2c3..d56ee0daff8215932ebf7bab87708c662ad23873 100644 (file)
--- a/package/jhead/jhead.mk
+++ b/package/jhead/jhead.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-JHEAD_VERSION = 3.03
+JHEAD_VERSION = 3.04
 JHEAD_SITE = http://www.sentex.net/~mwandel/jhead
 JHEAD_LICENSE = Public Domain
 JHEAD_LICENSE_FILES = readme.txt