[SECURITY] Fedora 10 Update: jhead-2.86-1.fc10

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-1824
2009-02-17 14:51:58
--------------------------------------------------------------------------------

Name        : jhead
Product     : Fedora 10
Version     : 2.86
Release     : 1.fc10
URL         : http://www.sentex.net/~mwandel/jhead/
Summary     : Tool for displaying EXIF data embedded in JPEG images
Description :
Jhead displays and manipulates the non-image portions of EXIF formatted
JPEG images, such as the images produced by most digital cameras.

--------------------------------------------------------------------------------
Update Information:

* fixes "CVE-2008-4640 jhead: arbitrary file deletion" (#468056)    * fixes
"CVE-2008-4641 jhead: command exection caused by incorrect handling of the shell
escapes" (#468057)
--------------------------------------------------------------------------------
ChangeLog:

* Mon Feb 16 2009 Adrian Reber <adrian at lisas.de> - 2.86-1
- updated to 2.86
- fixes "CVE-2008-4640 jhead: arbitrary file deletion" (#468056)
- fixes "CVE-2008-4641 jhead: command exection caused by
  incorrect handling of the shell escapes" (#468057)
- fixes "build ignores optflags" (#485697)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #468056 - CVE-2008-4640 jhead: arbitrary file deletion
        https://bugzilla.redhat.com/show_bug.cgi?id=468056
  [ 2 ] Bug #468057 - CVE-2008-4641 jhead: command exection caused by incorrect handling of the shell escapes
        https://bugzilla.redhat.com/show_bug.cgi?id=468057
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update jhead' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------