Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 908519 (CVE-2022-28550) - <media-gfx/jhead-3.08: buffer overflow vulnerability
Summary: <media-gfx/jhead-3.08: buffer overflow vulnerability
Status: CONFIRMED
Alias: CVE-2022-28550
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B2 [glsa?]
Keywords:
Depends on: 930948
Blocks:
  Show dependency tree
 
Reported: 2023-06-15 05:43 UTC by John Helmert III
Modified: 2024-05-01 10:09 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-06-15 05:43:25 UTC 
CVE-2022-28550 (https://github.com/Matthias-Wandel/jhead/issues/51):

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple `&i` or `&o` are given.

Patch: https://github.com/Matthias-Wandel/jhead/commit/64894dbc7d8e1e232e85f1cab25c64290b2fc167
Comment 1 Larry the Git Cow gentoo-dev 2024-03-11 18:49:48 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d4bf8684d408ef7310a7915ca277707350d708d6

commit d4bf8684d408ef7310a7915ca277707350d708d6
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2024-03-11 18:02:02 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-03-11 18:02:11 +0000

    media-gfx/jhead: add 3.08
    
    Bug: https://bugs.gentoo.org/908519
    Closes: https://bugs.gentoo.org/879543
    Closes: https://bugs.gentoo.org/890252
    Signed-off-by: Sam James <sam@gentoo.org>

 media-gfx/jhead/Manifest                           |  1 +
 .../jhead/files/jhead-3.08-fix-makefile.patch      | 42 ++++++++++++++++++++++
 media-gfx/jhead/jhead-3.08.ebuild                  | 36 +++++++++++++++++++
 3 files changed, 79 insertions(+)
Comment 2 Larry the Git Cow gentoo-dev 2024-05-01 10:09:13 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e1a59a083d1232dcfaf429929cee44049efb9771

commit e1a59a083d1232dcfaf429929cee44049efb9771
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: 2024-05-01 10:08:04 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: 2024-05-01 10:08:32 +0000

    media-gfx/jhead: drop 3.06.0.1-r1
    
    Bug: https://bugs.gentoo.org/908519
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 media-gfx/jhead/Manifest                           |   1 -
 .../files/jhead-3.06.0.1-CVE-2021-34055.patch      | 108 ---------------------
 .../jhead-3.06.0.1-mkstemp-fix-makefile.patch      |  52 ----------
 media-gfx/jhead/jhead-3.06.0.1-r1.ebuild           |  27 ------
 4 files changed, 188 deletions(-)