![Fabrice Fontaine](/assets/img/avatar_default.png)
- Fix CVE-2019-1010301: jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The attack vector is: Open a specially crafted JPEG file. - Fix CVE-2019-1010302: jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122 show_IPTC(). The attack vector is: the victim must open a specially crafted JPEG file. - Fix CVE-2019-19035: jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file. - Update indentation of hash file (two spaces) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
21 lines
533 B
Makefile
21 lines
533 B
Makefile
################################################################################
|
|
#
|
|
# jhead
|
|
#
|
|
################################################################################
|
|
|
|
JHEAD_VERSION = 3.04
|
|
JHEAD_SITE = http://www.sentex.net/~mwandel/jhead
|
|
JHEAD_LICENSE = Public Domain
|
|
JHEAD_LICENSE_FILES = readme.txt
|
|
|
|
define JHEAD_BUILD_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) $(TARGET_CONFIGURE_OPTS) -C $(@D)
|
|
endef
|
|
|
|
define JHEAD_INSTALL_TARGET_CMDS
|
|
$(INSTALL) -m 0755 -D $(@D)/jhead $(TARGET_DIR)/usr/bin/jhead
|
|
endef
|
|
|
|
$(eval $(generic-package))
|