Описание
Security update for jhead
This update for jhead fixes the following issues:
- CVE-2022-41751: Fixed shell injection via filenames (boo#1204409)
Список пакетов
SUSE Package Hub 15 SP3
jhead-3.00-bp153.3.3.1
openSUSE Leap 15.3
jhead-3.00-bp153.3.3.1
Ссылки
- E-Mail link for openSUSE-SU-2022:10178-1
- SUSE Security Ratings
- SUSE Bug 1204409
- SUSE CVE CVE-2022-41751 page
Описание
Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option.
Затронутые продукты
SUSE Package Hub 15 SP3:jhead-3.00-bp153.3.3.1
openSUSE Leap 15.3:jhead-3.00-bp153.3.3.1
Ссылки
- CVE-2022-41751
- SUSE Bug 1204409