Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian 10 Jhead: DLA-3219-1 Critical Command Execution Risk Fix

debian lts
Calendar Grey December 4, 2022
Dist Debian Esm H88
The Debian LTS Advisory DLA-3218-1 covers vulnerabilities found in the jq tool, aimed at mitigating the risk of code injection and application failures.
Jhead, a tool for manipulating EXIF data embedded in JPEG images, allowed attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regenerat...
Topics%20covered

Topics Covered

security advisory buffer overflow critical debian command execution

Summary

We recommend that you upgrade your jhead packages.

For the detailed security status of jhead please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/jhead

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

-------------------------------------------------------------------------Package: jhead
Version: 1:3.00-8+deb10u1
CVE ID: CVE-2021-34055 CVE-2022-41751
Debian Bug: 1024272 1022028

Topics%20covered

Topics Covered

security advisory buffer overflow critical debian command execution

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here