8746 moderate openSUSE Leap 42.3 Update ports This update for jhead fixes the following security issues: - CVE-2016-3822: jhead remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data (bsc#1108480). - CVE-2018-16554: The ProcessGpsInfo function may have allowed a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling (bsc#1108480). jhead-3.00-11.1.ppc64le.rpm jhead-3.00-11.1.src.rpm jhead-debuginfo-3.00-11.1.ppc64le.rpm jhead-debugsource-3.00-11.1.ppc64le.rpm jhead-3.00-11.1.aarch64.rpm jhead-debuginfo-3.00-11.1.aarch64.rpm jhead-debugsource-3.00-11.1.aarch64.rpm