Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package patchinfo.16276 for 
openSUSE:Leap:15.2:Update checked in at 2021-05-16 16:04:45
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.2:Update/patchinfo.16276 (Old)
 and      /work/SRC/openSUSE:Leap:15.2:Update/.patchinfo.16276.new.2988 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "patchinfo.16276"

Sun May 16 16:04:45 2021 rev:1 rq:892679 version:unknown

Changes:
--------
New Changes file:

NO CHANGES FILE!!!

New:
----
  _patchinfo

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ _patchinfo ++++++
<patchinfo incident="16276">
  <issue tracker="cve" id="2016-3822"/>
  <issue tracker="cve" id="2019-1010302"/>
  <issue tracker="cve" id="2020-6624"/>
  <issue tracker="cve" id="2018-6612"/>
  <issue tracker="cve" id="2019-1010301"/>
  <issue tracker="cve" id="2021-3496"/>
  <issue tracker="cve" id="2020-6625"/>
  <issue tracker="cve" id="2018-16554"/>
  <issue tracker="cve" id="2018-17088"/>
  <issue tracker="bnc" id="1144316">VUL-1: CVE-2019-1010301: jhead: Stack 
buffer overflow in gpsinfo.c when running jhead</issue>
  <issue tracker="bnc" id="1144354">VUL-1: CVE-2019-1010302: jhead: incorrect 
access control in iptc.c Line 122 show_IPTC() causing denial of service</issue>
  <issue tracker="bnc" id="1160547">VUL-1: CVE-2020-6624: jhead: heap-based 
buffer over-read in process_DQT in jpgqguess.c</issue>
  <issue tracker="bnc" id="1160544">VUL-1: CVE-2020-6625: jhead: heap-based 
buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c</issue>
  <packager>pgajdos</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for jhead</summary>
  <description>This update for jhead fixes the following issues:

jhead was updated to 3.06.0.1

* lot of fuzztest fixes
* Apply a whole bunch of patches from Debian.
* Spell check and fuzz test stuff from Debian, nothing useful to
  human users.
* Add option to set exif date from date from another file.
* Bug fixes relating to fuzz testing.
* Fix bug where thumbnail replacement DID NOT WORK.
* Fix bug when no orientation tag is present
* Fix bug of not clearing exif information when processing images
  with an without exif data in one invocation.
* Remove some unnecessary warnings with some types of GPS data
* Remove multiple copies of the same type of section when deleting
  section types
</description>
</patchinfo>

Reply via email to