[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#969027: O: jhead -- manipulate the non-image part of Exif compliant JPEG files



Package: wnpp
Severity: normal

I intend to orphan the jhead package.

jhead is an EXIF parser and has MANY problems with the parser. It works
fine in normal cases. But the parser has NO defencive check so it is
very easy to make it crash or exploit buffer overflows.

- The upstream maintainer is not reactive.
- I do not use this package any more.
- I do not have time and energy to fix myself the crashes and possibly
  security issues.

The package description is:
 jhead is a command line driven utility for extracting digital camera settings
 from the Exif format files used by many digital cameras. It handles the
 various confusing ways these can be expressed, and displays them as F-stop,
 shutter speed, etc. It is also able to reduce the size of digital camera JPEGs
 without loss of information, by deleting integral thumbnails that digital
 cameras put into the Exif header.


Reply to: