CVE request: jhead

[Jamie Strandboge <jamie () canonical com>]

Hi,

Marc Merlin and John Dong discovered several vulnerabilities in jhead.
Upstream was contacted, who later released jhead 2.84 [1]. Initial
report can be seen in Ubuntu's bug tracker [2].

CC'ing John, as he is who found the majority of the issues and
coordinated with upstream.

Jamie

[1] http://www.sentex.net/~mwandel/jhead/changes.txt
[2] https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020

-- 
Ubuntu Security Engineer     | http://www.ubuntu.com/
Canonical Ltd.               | http://www.canonical.com/

Attachment: signature.asc
Description: Digital signature