oss-security - CVE request: jhead

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Wed, 15 Oct 2008 11:55:42 -0500
From: Jamie Strandboge <jamie@...onical.com>
To: oss-security@...ts.openwall.com
Cc: jdong@...ntu.com
Subject: CVE request: jhead

Hi,

Marc Merlin and John Dong discovered several vulnerabilities in jhead.
Upstream was contacted, who later released jhead 2.84 [1]. Initial
report can be seen in Ubuntu's bug tracker [2].

CC'ing John, as he is who found the majority of the issues and
coordinated with upstream.

Jamie

[1] http://www.sentex.net/~mwandel/jhead/changes.txt
[2] https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020

-- 
Ubuntu Security Engineer     | http://www.ubuntu.com/
Canonical Ltd.               | http://www.canonical.com/

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.