Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2023:0054-1

Опубликовано: 20 фев. 2023
Источник: suse-cvrf

Описание

Security update for jhead

This update for jhead fixes the following issues:

  • Fixed autorotation problem caused by CVE-2022-41751 patch. [boo#1207150]

Список пакетов

SUSE Package Hub 15 SP4
jhead-3.06.0.1-bp154.2.9.1
openSUSE Leap 15.4
jhead-3.06.0.1-bp154.2.9.1

Описание

Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option.


Затронутые продукты
SUSE Package Hub 15 SP4:jhead-3.06.0.1-bp154.2.9.1
openSUSE Leap 15.4:jhead-3.06.0.1-bp154.2.9.1

Ссылки