9036 moderate openSUSE Leap 15.0 Update ports This update for jhead fixes the following issues: Security issues fixed: - CVE-2018-17088: The ProcessGpsInfo function may have allowed a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because there is an integer overflow during a check for whether a location exceeds the EXIF data length. This is analogous to the CVE-2016-3822 integer overflow in exif.c. (boo#1108672) - CVE-2018-16554: The ProcessGpsInfo function may have allowed a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling. (boo#1108480) jhead-3.00-lp150.3.6.1.aarch64.rpm jhead-debuginfo-3.00-lp150.3.6.1.aarch64.rpm jhead-debugsource-3.00-lp150.3.6.1.aarch64.rpm jhead-3.00-lp150.3.6.1.armv7hl.rpm jhead-debuginfo-3.00-lp150.3.6.1.armv7hl.rpm jhead-debugsource-3.00-lp150.3.6.1.armv7hl.rpm jhead-3.00-lp150.3.6.1.ppc64le.rpm jhead-debuginfo-3.00-lp150.3.6.1.ppc64le.rpm jhead-debugsource-3.00-lp150.3.6.1.ppc64le.rpm